obtaining scan data captured by a laser scanner, the laser scanner including a first private key that uniquely corresponds to the laser scanner;

obtaining a first digital signature corresponding to the obtained scan data, the first digital signature being generated based on the scan data and the first private key;

validating the first digital signature using a first public key that corresponds to the first private key;

generating a report that summarizes results of the validating of the first digital signature;

transforming and aggregating, by a scan data aggregator, the scan data and any other data captured by the laser scanner as aggregated scan data; and

generating a second digital signature corresponding to the aggregated scan data, the second digital signature being generated by signing hashes corresponding to the aggregated scan data using a second private key corresponding to the scan data aggregator;

wherein the first private key corresponding to the laser scanner is located in an off-system data storage and is not stored locally on the laser scanner; and

the first digital signature is generated by and received from a computer system associated with the off-system data storage that digitally signs hashes provided by the laser scanner using the first private key.