Skip to main content
How Can We Help?Contact

Success story · A US state government

Blockchain-based verification secured a state’s pandemic event records.

98%Of recorded events were successfully validated on first attempt
42%Reduction in suspected or manual “is this real?” checks at verification points
<5 sSeconds average verification time

A US state government was serving almost 9 million residents during the height of the pandemic and, like every hard-hit state, had to move fast on testing, vaccination, and proof-of-vaccination workflows while fraud risks were growing. At the same time, the state was already pushing digital, public-sector innovation, so a secure, tamper-evident way to share COVID-related status and records fit the state’s modernization trajectory.

Bring us your decision Download the PDF
Government & public sectorData protectionAI security & cyber riskData engineering & platforms
Impact
98%Of recorded events were successfully validated on first attempt.
42%Reduction in suspected or manual “is this real?” checks at verification points.
<5 sSeconds average verification time for authorized parties.
01The Situation

The Situation

Business Problem

During vaccination rollout, The state needed a way to prove COVID-related events were real and issued by trusted health sources, because paper cards were easy to lose or fake. The state required a secure, tamper-evident mechanism that preserved privacy while still letting businesses and agencies verify authenticity quickly.

02The Challenge

The Challenge

We had to design something that state and health entities could write to, that citizens could present, and that verifiers could trust—all without exposing PHI or creating a data-sharing burden hospitals couldn’t sustain. It also had to be resilient to changing public-health guidance and work alongside existing state digital efforts, not replace them.

03The Solution

The Solution

We built a COVID-era blockchain solution that recorded and validated vaccination/test events from approved sources and exposed a lightweight way for authorized parties to verify authenticity, time, and issuer—without revealing more than was necessary.

How the system works ISSUERSPERMISSIONED LEDGERVERIFICATIONHealth entitiesPartner entities01Accepts approved issuers02Writes proofs, not records03Time-stamps every writeCitizen presentsHealth guidancePHI NEVER LEAVES THE ISSUERVERIFIED · AUTHENTICIssuer, time and eventconfirmed in secondsDISPUTE OR FRAUDImmutable, attributableaudit trailWORKS ALONGSIDE EXISTINGSTATE DIGITAL EFFORTS
  • 01Permissioned ledger for COVID eventsOnly approved state health or partner entities could write attestations (e.g., vaccine administered, test completed), giving the chain a known set of trusted issuers.
  • 02Minimal, privacy-aware payloadsWe wrote proofs and metadata—not raw medical records—to the chain, so verifiers could trust the event without seeing protected details.
  • 03Audit and transparencyEvery write was time-stamped and attributable, giving the state an immutable audit trail if proof fraud or disputes arose.

Impact

What changed, as reported.

The figures as printed in the firm's own case-study collateral — nothing rounded or annualised.

98%Of recorded events were successfully validated on first attempt.
42%Reduction in suspected or manual “is this real?” checks at verification points.
<5 sSeconds average verification time for authorized parties.

Data & AI is our singular focus. Data Products is a diverse firm with senior and executive data scientists focused on fully developing project solutions that leverage advanced mathematics and data that drive tangible insights that optimize your organization’s operations.

Download the PDF →

Client background

A US state government.

A US state government was serving almost 9 million residents during the height of the pandemic and, like every hard-hit state, had to move fast on testing, vaccination, and proof-of-vaccination workflows while fraud risks were growing. At the same time, the state was already pushing digital, public-sector innovation, so a secure, tamper-evident way to share COVID-related status and records fit the state’s modernization trajectory.

Where it leads

The practice behind it, and the starter service that opens the same door.

If your situation resembles this one, the starter service is the fixed-scope way in — scoped with you, fixed fee, before you commit to anything.

The practice

AI security & cyber risk

Where this engagement was delivered, and where the work continues at scale.

 Start here

Cyber Risk Sprint

The fixed-scope, fixed-fee engagement that starts work like this.

Start from the decision

Bring us the decision you need to make, not the story that looks closest.

Describe what you are trying to decide, what is already in place and who has to sign it off. We will tell you how closely it resembles this engagement — and which starter service it points to — before you commit to anything.

The decisionWhat has to be decided, and by when
What is in placeSystems, data, the people who own them
Who signs it offBoard, risk, legal, a function head
How close this isWhere your situation differs from this one
Bring us your decision All case studies

Not sure where to start? The Assessment Sprint scores six readiness dimensions against your own systems, in two weeks.

Does your decision look like this one? Bring us the decision, not the story.

Bring us your decision
Bring us your decision