Mela Works Compliance Center: Legality, Security and Evidential Validity

20 Nov 2025

02 min Share

TRY FOR FREE! BOOK A DEMO

Download the Mela app

I. Trust Standards: Data Protection and Certifications

🔐 ISO 27001 Certification: Our guarantee for your data

Mela Works is certified ISO/IEC 27001 (Information Security Management). This international standard ensures that our information security management system complies with the highest industry requirements.

What this means for you:

Controlled Risk: Security and risk-management processes are constantly monitored.
GDPR Compliance: Our system is designed to comply with the General Data Protection Regulation (GDPR) and applicable Italian regulations.
Data Residency: Customer data is stored in secure data centers located within the European Union.

II. Immutable Traceability: The Value of Blockchain

🔗 Blockchain Notarization: Strong evidential value

Beyond data security, Mela ensures the integrity and timestamped certainty of official site documents. With blockchain notarization, every site report, daily parte, and checklist gains strong evidential validity.

This system:

Ensures Timestamp Certainty: The document hash is recorded on a distributed ledger, providing a timestamp that is extremely difficult to dispute.
Immutability: Any subsequent modification becomes immediately detectable.
Traceability: Provides solid and largely incontrovertible documentary evidence in the event of disputes or audits.

👉 Learn how blockchain notarization works >>

III. Legal Validity: Comparison and Regulatory Framework

⚖️ The Legal Validity Pack: Electronic Signatures and Compliance

Legal validity in Italy depends on the level of electronic signature used. Our solution lets you choose the correct evidential level for each document.

Document Type	Required Legal Proof	Mela Works Solution
Daily partes and Checklists	Simple Electronic Signature (SES)	On-screen signature + strong blockchain timestamp. (Unless otherwise required by contract.)
Site Minutes / Reports	Advanced Electronic Signature (AES) / QES	Integration with partner solutions or blockchain notarization (robust evidence).
Public Procurement Documents	Qualified Electronic Signature (QES) / SPID/CNS	Current Status: Integration or export for external QES signing.

🏛️ Alignment with Sector Regulations

(These references are Italian regulations and apply to clients operating in Italy.)

D.M. 49/2018 (Site Supervision): Our Digital Site Log is designed to support compliance with electronic record-keeping and traceability requirements.
D.Lgs. 36/2023 (New Public Procurement Code): Our Audit Trail and Versioning features ensure the document traceability required during tender procedures and public-works execution.
AgID-Compliant Preservation: We provide solutions that integrate with accredited long-term digital preservation services, essential for maintaining evidential value over time.

IV. Audit Log and Technical Details

Audit Trail and Standards-Compliant Preservation

We provide the governance evidence required by technical buyers and procurement teams:

Audit Trail: Every action (creation, modification, signature, attachment) is recorded with date, time, and user ID.
Privacy note: explicit worker consent must be obtained by the company for any GPS-based positional tracking for audit purposes.