An independent witness to every decision your systems make

It is a tamper-evident, time-ordered record of every consequential decision an AI system made - the inputs, the model and version that decided, the output, and any human review - cryptographically bound so anyone can verify afterwards that it was not altered, deleted or reordered. An ordinary log records that something happened; an audit trail proves what was decided, on what basis, and that the record still stands. We publish the definition, the eight required properties, the field set and the regulatory mapping in full on What is an AI decision audit trail?.

Decision Keep is an independent forensic witness to every decision your organisation makes, human, automated or AI, recorded outside your systems. It signs each decision with your own Ed25519 key, so the evidence belongs to you and can be checked by your auditors offline. Unlike traditional logging, the record is immutable and verifiable without trusting the platform. Read more in our documentation or blog.

Each automated decision is sealed with a digital signature and linked to the one before it, forming a chain that cannot be changed without detection. Auditors and regulators verify the whole ledger offline using your published key. No account and no trust in the platform required. See pricing for engagement details.

It records the system, model, version and inputs behind each automated decision, and proves exactly when and by what version it was made. That gives you the evidence behind automated-decision disclosure obligations such as Australia's APP 1.7–1.9, which is what lets you stand behind the statements in your privacy policy. It also supports equivalent requirements in other regions. Learn more in our docs.

Yes. It meets the EU AI Act's automatic logging requirement, GDPR storage-limitation obligations, and the right to erasure through signed, verifiable erasure that preserves the integrity of the record. Decision Keep is designed specifically for the compliance challenges of the agentic era. Book a demo to discuss your specific obligations.

An optional time stamp from an independent authority that proves exactly when an automated decision was signed, anchored outside your control. It adds forensic proof of "when" a decision was made. For regulated environments, we can integrate eIDAS-qualified trusted time as part of your enterprise engagement. Contact sales to learn more.

Yes. Verification is fully trustless and offline. Auditors use your published key and the exported ledger. No login, no access request, no trust in Decision Keep. Our public verifier lets anyone check a receipt in seconds, and auditors can download a signed attestation report.

Decision Keep is a paid product and pricing is scoped per engagement. We operate the vault and stand behind the deployment; pricing is an annual licence plus metered per-decision usage that covers the platform. Book a demo to discuss your plan.

Decision Keep offers three recording models: Operator-signs (we hold your org key and sign on your behalf), Custodian (we host the ledger but your payload is sealed to your published key - zero-knowledge), and Client-signs (you sign in your own environment; the raw payload never reaches us). Each model is selectable per workspace. Compare models on the pricing page.

Traditional audit logs are stored on systems you control, which means they can be altered or deleted. Decision Keep records every automated decision outside your systems as signed, immutable evidence. The chain is tamper-evident, and auditors verify offline without trusting the platform. See pricing or read our blog for more on the difference.

Decision Keep is not yet SOC 2 or ISO 27001 certified. The product is engineered with security and compliance controls mapped to SOC 2, ISO 27001, EU AI Act, GDPR, APP 1.7–1.9 and APRA, and an independent audit can be scoped as a workstream in your enterprise engagement. Contact us to discuss your audit requirements.

An automated decision is any decision made by software without meaningful human involvement at the moment it is made - credit scoring, insurance underwriting, fraud routing, eligibility checks, content moderation and similar. If your system applies rules, a model, or an agent to reach a conclusion and act on it, that is an automated decision. Decision Keep records every one of them as a signed, verifiable receipt the moment it happens.

Traditional audit logs live on systems you control, which means they can be altered or deleted. Decision Keep records every automated decision outside your systems as signed, immutable evidence. The chain is tamper-evident, and auditors verify it offline without trusting the platform. See pricing for the full comparison.

Decision Keep is built for the compliance challenges of the agentic era. It maps to Australia's APP 1.7–1.9, the EU AI Act (Art.12 automatic logging), GDPR (storage limitation and right to erasure), US statutes including CCPA/CPRA and the Colorado AI Act, and UK GDPR. It also aligns with SOC 2, ISO 27001, ISO/IEC 42001 and APRA CPS 234. See the full compliance mapping.

Yes. Decision Keep is framework-agnostic. You can send decisions via the REST API, stream JSONL logs, or use the non-blocking TypeScript SDK. It works with any agentic system - LangChain, CrewAI, AutoGen, or custom - and the MCP server lets AI coding assistants verify decision trails natively. Explore integration options.