Third-party timestamping
Also known as: RFC 3161 · trusted timestamp · time-stamping authority
Third-party timestamping has an independent authority attest that a document already existed at a given date.
It answers a question signatures do not settle. A signature proves origin and integrity; it does not prove the date, since the issuer controls their own clock.
The mechanism sends a digest — never the document — to an authority that countersigns it with its own clock. The content therefore never leaves the organization.
An honest distinction must be kept between a document merely published and one genuinely countersigned by an authority. Conflating the two borrows credibility that was not earned.
What it means for a small business
The concrete use is proving precedence: showing a policy existed before the incident, rather than written afterwards to suit the case.
Related terms
So what actually applies to you?
A definition tells you what a term means, not what your organization must do. The assessment answers the second question — free, no credit card.
Updated September 1, 2026 · Educational definition; not legal advice.