Govern · Audit trail
Every governance event, hash-chained, and re-verified every time you look.
An auditor asking "prove it" should get a record, not a policy document describing what the AI should have done. This is that record.
Why "we log things" isn't the same claim
A log you can quietly edit isn't evidence.
Most systems log events into a table anyone with database access can edit or delete without a trace. This trail is hash-chained specifically so that isn't true here. A tampered entry breaks the chain after it, and that break is what gets checked, automatically, every time the trail is read back.
What's actually in it
Not a black box. A checkable one.
- Hash-chained
- Every entry's hash depends on the one before it. Altering the past breaks the chain, visibly.
- Verified on export
- The chain is re-checked every time you pull a CSV (spreadsheet) or JSON export, not just written once and trusted.
- SIEM streaming
- SIEM is the security-monitoring software many IT teams already use. Business plans and above can stream events to it as they happen.
- Evidence-pack email
- A scheduled export of the record, sent automatically for the parts of it you want on file.
Approvals from human-in-the-loop review and every agent pipeline handoff write to this same trail.
FAQ
Compliance teams are asking
What does "hash-chained" actually protect against?
Each entry's hash depends on the one before it, so altering or deleting a past entry breaks every hash after it. A tamper attempt is detectable, not just logged in good faith.
Can we export the audit trail for our own compliance records?
Yes, as a CSV spreadsheet file or as JSON. The chain is verified again as part of the export, so what you hand your auditor comes with its own proof that nothing was altered, not just a claim.
Can our own security tooling watch the trail in real time?
On Business plans and above, yes. A SIEM webhook (SIEM is the security-monitoring software many IT teams already use) streams events out as they happen. There is also a monthly evidence-pack email for the parts of the record you want on file automatically.
When someone asks you to prove it, point at the record.
Twenty minutes with the founder. No slides. The real product.
