Shuttermark
Photo
Hardware-backed JPEG captured on the device.
Capture it. Organize it. Prove it.
Document the work. Keep the proof.
Shuttermark is a simple way to document what you saw in the field and prove it later. Capture signed photos on the device, add optional notes, location, and tasks, then share the original file. Recipients check it independently — they do not need a Shuttermark account.
Local signed capture is never metered. Cloud backup and server receipts follow your published plan.
Unit 408B · Move-in condition
LocationSite gate, north elevation
NoteHairline crack under sill — photograph before patch
What you can record
Photos first. Context when you need it.
Every capture can stand alone. Notes, location, tasks, projects, and references are optional filing — never a requirement to take the picture.
Location
Optional coordinates as claimed by the device.
Notes
Short field notes bound to the original file.
Tasks
Optional assignment so a crew knows what to shoot.
Projects
Optional folder for a job, unit, or claim.
References
Permit IDs, drawing numbers, or unit tags.
How it works
Capture. Organize. Prove.
Five steps from the shutter to an independent check.
-
1
Capture
Take the photo on a supported Android device.
-
2
Sign
The device signs the original JPEG with a hardware-backed key.
-
3
Organize
Keep it standalone, or add notes, location, a task, or a project.
-
4
Share
Send the original file — not a chat recompress — plus a verify link.
-
5
Prove
Anyone opens the public verifier and checks the original JPEG.
Built for real work
Evidence that survives the handoff.
Field photos get lost in camera rolls and group chats. Shuttermark keeps the original, signed bytes and the optional context you chose to attach.
On-device signing
Private keys stay in Android Keystore (TEE or StrongBox).
Original file
The signature is tied to the JPEG bytes you captured.
Optional context
Notes, location, tasks, and projects never block capture.
Independent check
Verification does not require the capturing account to be online.
In the field
Inspect. Report. Maintain. Verify.
Inspect
Walk a unit, trench, or roof and keep a signed record of what was there.
Report
Hand the original files to a landlord, lender, or adjuster with a verify link.
Maintain
File progress photos to a project when you want a paper trail.
Verify
A recipient checks the original JPEG without installing the app.
Where it is used
The same capture flow, different jobs.
Property
Move-in and move-out condition photos with unit references.
Construction
Pre-pour and behind-wall photos bound to a drawing or task.
Insurance
On-site claim photos the recipient can check independently.
Infrastructure
Completed work photos with a permit or reference tag.
Teams
Dispatch work. Keep capture local.
Create a workspace, invite people, and send tasks. Photos are still signed on each device. Cloud allowances never delete local signed files.
Trust
What a valid proof means — and what it does not.
A valid Shuttermark photo chains to a Google hardware attestation root pinned by SPKI. Device clocks are claimed capture time. A server attestation is a receipt time.
Hardware keys
Private keys never leave secure hardware.
Byte match
The JPEG has to match the signed bytes.
Independent root
The certificate in the file is not the trust anchor.
Public verifier
Check an original JPEG.
Open the public verifier, upload the original file, and read a human result: valid, limited, or not valid.
Verify a photo
Open the public verifier, upload the original file, and read a human result: valid, limited, or not valid.
Valid
Bytes match and the chain anchors to the pinned Google hardware root.
Limited
Something in the chain or metadata needs a closer look.
Not valid
The file does not match a hardware-backed Shuttermark signature.
Pricing
Capture is never blocked by your plan.
Local signed capture stays free to use on the device. Cloud storage and server-attested packages follow published allowances.
Free
$0
On-device signed capture. No account required.
- Unlimited local signed capture
- Hardware-backed signatures
- Public verification
Pro
$7.99/mo
Personal workspace, two Android capture devices, and a signed-in portal.
- 10 GB storage
- 10 server-attested packages / month
- 2 Android capture devices
- Personal portal
Team
Most popular for teams$79/mo
Five seats, pooled Android devices, and one portal-enabled member.
- 5 seats included ($12 extra)
- 50 GB storage
- 100 packages / month
- 5 Android device slots
- 1 portal user
Business
$249/mo
Twenty seats, pooled Android devices, and three portal-enabled members.
- 20 seats included ($12 extra at launch)
- 200 GB storage
- 500 packages / month
- 20 Android device slots
- 3 portal users
FAQ
Straight answers.
Is this an AI detector or a notary?
No. Shuttermark proves that a JPEG still matches a hardware-backed signature. It does not detect AI and does not legally notarize a scene.
Do I need an account to take a signed photo?
No. Local signed capture works in the Android app without a Team workspace. Pro and Team add cloud filing and portal seats.
Do I have to put every photo in a project or task?
No. Evidence is first-class. Projects, tasks, references, tags, and descriptions are optional context.
What if I am underground or offline?
Signing is local. Upload later if you use cloud backup. Verification of a shared original does not need the capturing phone to be online.
Document the work. Keep the proof.
Install the Android app for capture. Start a Team when you need a workspace. Verify stays public.