Rules for AI ask you to show what your systems did and when. A signafAIde record answers both, and your auditor can check it with the open verifier instead of taking your word for it.
| Framework | What it asks for | What a record gives you |
|---|---|---|
| EU AI ActRecord-keeping, Article 12 | High-risk AI systems must record events automatically over their lifetime, so that what the system did can be traced. | Every tool call your agent makes is recorded before it runs and after it returns, in a chain where a missing or edited record shows. |
| ISO/IEC 42001AI management system | Documented, retained evidence that your AI systems operate the way your management system says they do. | An export or audit pack for any period, which the auditor verifies record by record with the open verifier. |
| SOC 2Trust services criteria | Evidence that controls operated throughout the audit period, not only on the day of the audit. | Public timestamps fix when each record existed, so the whole period can be shown, not asserted. |
A plain statement of what each record proves, with the technical detail one click away. Or a verification pack, checked with one command.
On 13 Nov 2026 at 12:58:36 UTC, the agent claims-bot decided to run approve_payout. The record was signed by the agent, co-signed by signafAIde, and has not changed since.
$ npx signafaide verify pack.json --keys https://api.signafaide.co.uk/.well-known/signafaide-keys.json --agent-keys agent-keys.json --head head.json signafAIde pack of project claims-automation (prj_01JCZQ8Z5X3V7N2M4K6H8G0F1D, live), 48 records 1. Envelope schema PASS 48 records 2. Record hashes PASS 48 records 3. Client signatures PASS 48 records 4. Agent chains PASS 48 records 5. Merkle proofs PASS 48 records 6. Batch hashes and signatures PASS 6 batches 7. Batch chain PASS 6 batches 8. Signed heads PASS 6 heads 9. drand rounds PASS 6 rounds 10. Anchors PASS 6 anchors 11. OpenTimestamps PENDING 6 proofs; waiting for the public timestamp to confirm 12. Content hashes NOT CHECKED 0 records; no content supplied (hash-only records) PASS: 10 of 12 checks passed, 1 pending (public timestamp), 1 not checked (content hashes); export of every agent, all records
The record and the output above are examples.
One JSON file per period, with your agent-keys.json. The auditor runs signafaide verify on their own machine. Verification is never metered.
A read-only view of the records, with a status summary and the exact verify command. Free: 1 active link, expiring within 7 days. Solo: unlimited, expiry up to 90 days. Team and Enterprise: unlimited, any expiry.
A printable report for a period: scope, counts, the verification result, chain integrity, the public timestamp status as of the moment it is made and the verify command. On Solo and up.
Evidence mapped to the EU AI Act, ISO/IEC 42001 and SOC 2, on Enterprise.