Provenance: to establish authenticity, ownership, and value
Step 1: hash the document (MD5?) https://pajhome.org.uk/crypt/md5/
Step 2: sign the hash https://developer.mozilla.org/en-US/docs/Web/API/SubtleCrypto/sign
Step 3: save the file and meta data to IPFS and locally https://medium.com/coinmonks/ipfs-tutorial-sending-and-getting-files-via-nodejs-backend-85c85ae7f6f6
Step 4: publish the link to the file, the meta data, public key of signer and any other information to the IAM platform