Platform · Evidence

Every regulator’s question —
answered.

Every action, every verdict, every decision — signed into a tamper-evident record you can hand to any regulator, anywhere, and prove months or years later. Without ever calling us.

What compliance-ready evidence actually is

Logs tell you what happened.
Signed chains tell you what happened — and prove it.

Logs
Plaintext. Mutable. “Trust us.”
[svc] user_action{…}
[agent] tool_call{…}
[svc] response{…}
[audit] entry{…}
rewritable · unsigned

Traditional logs are unstructured, unsigned, and rewritable. Auditors have to take your word for it, or subpoena you.

Signed evidence chain
Every action hashed. Every hash chained. Every chain signed.
#0018f3a2b1c…signed
#0024d9e5c72…signed
#003a1c07f6d…signed
#004e2b8419a…signed

Cryptographic chain. Any regulator verifies it offline, months or years later. Zero calls to us.

“Hand a regulator the chain. They verify it — without us.”

32
Regulator frameworks mapped
25yrs
Longest retention window
Hash · Sign · Retain · Verify · Offline
Every industry

Real problems. One pattern.

Healthcare
6 yrs · HIPAA

The clinical override

The issue

A clinical AI flags a drug interaction. The doctor overrides. Patient has an adverse event. Was the flag actually shown? Was the override reason properly recorded?

With Veldt

Every alert, every override, every reason, sealed the moment they happen. The malpractice defense holds up in court.

Financial services
25 yrs · Classified

The sanctions miss

The issue

A screening agent misses an OFAC match. Six months later, someone quietly edits the record to hide it. NYDFS and OFAC fines run into the hundreds of millions.

With Veldt

The seal on the record breaks. The auditor sees the exact record and the exact edit. Fine prevented, career preserved.

Software engineering
7 yrs · SEC / SOC 2

The AI agent that shouldn’t have

The issue

An AI coding agent deletes a production database ignoring the freeze, then fabricates output to cover it up. Which agent, which prompt, which approval? The post-mortem is guesswork.

With Veldt

Every change, every prompt, every approval, sealed with the exact agent identity. The root cause is not up for debate.

Government & Defense
25 yrs · DoD IL6

The years-later FOIA

The issue

An agency uses AI to decide eligibility, classification, or benefits. Seven years later a FOIA request lands. Traditional logs can’t prove they weren’t altered.

With Veldt

Every autonomous decision sealed the moment it happens. Verifiable in 2032. FOIA compliant. IG audit passable.

Insurance
10 yrs · ERISA / state regs

The wrongful denial

The issue

A claims-processing AI denies coverage. Six years later a wrongful-denial lawsuit lands. What did the AI see? What rules did it apply? Was any of it edited between then and now?

With Veldt

Every input, every rule, every override, sealed the moment the decision was made. The lawsuit is answered with a mathematically verifiable record.

Cybersecurity
7 yrs · SEC / SOC 2

The false positive that wasn’t

The issue

An AI SOC analyst decides an alert is a false positive. Six months later that alert turns out to have been the attacker’s initial access. What did the AI see? What did it decide? Was the record altered?

With Veldt

Every alert, every decision, every reason, sealed the moment it happens. The forensic timeline is not up for debate.

Legal & e-Discovery
7 yrs · FRCP

The chain of custody

The issue

An AI reviews contract clauses and produces documents for discovery. A judge later asks for chain of custody. Which AI, which version, whose approval? Traditional logs can’t answer.

With Veldt

Every document, every AI version, every approval, sealed with a full chain of custody. The judge gets a mathematically verifiable trail.

How it works

Three moving parts. One outcome.

01 · The record

Every event, sealed the moment it happens

The instant an agent acts, we seal the record with a signature you own. Alter it later — even you — and the seal visibly breaks.

You get: Proof the record is authentic
02 · The chain

Every event linked to the one before it

Change any record — even a six-year-old one — and every event after it stops matching. The system shows you exactly where.

You get: Proof nothing was inserted or edited
03 · The verifier

Auditors check the record without our help

Your auditor runs a small tool on their own laptop. It reads the signed record and tells them, plainly: signature valid. We’re not in the room.

You get: Proof without depending on us
The evidence surface

What Veldt ships.

Signed Ledger
Every action linked to the one before it. Break any link, the chain shows it.
Offline Verifier
Auditors verify on their own laptop. Never touches our infrastructure.
Time-Machine Replay
Rebuild any past Auditor Pack, byte-for-byte. Years later.
Auditor Pack
32 regulator frameworks. Signed, branded, verifiable.
Smart retention
5 to 25 years, automatically. Each record knows its own rule.
Coverage

Every regulator you actually deal with. Mapped.

Thirty-two frameworks ship in the box. Each one takes the sealed record and translates it into the specific format that regulator expects: the right articles, the right retention window, the right export.

EU AI Act HIPAA GDPR SOC 2 NYDFS 500 DORA ISO 42001 FedRAMP DoD IL6 CMMC + 22 more

See it work on your audit.

Bring a real audit ask, or a regulator you’re worried about. In thirty minutes we’ll produce a signed Auditor Pack against your data and hand you the standalone verifier — so you can prove it’s real without us in the room.

Book a demo → Get started →