Skip to main content
Decision Keep

Every flight has a black box, why doesn't your AI?

Decision Keep operates entirely outside your systems, asynchronously recording every automated decision to create a tamper-proof audit trail. It equips enterprises with the mathematical certainty required to compress audit cycles, withstand regulatory scrutiny, and legally defend automated decisions.

Book a demo

The five pillars

Independent
Out-of-band witness. Outside your systems. We can't alter what we record.
Immutable
Append-only record chain. Tampering breaks the chain and is detectable by your auditors.
Verifiable
Offline tools and a public verifier. No account, no trust in the platform required.
Zero-knowledge
Your private key never leaves your environment. We never see plaintext payloads.
Sovereign
Your keys, your evidence. Always exportable and verifiable offline on your own key - no lock-in.

The platform

Out-of-band forensic witness for AI & automated decisions

Decision Keep sits outside your organisation's systems as zero-knowledge infrastructure. It records every automated decision as signed, tamper-evident evidence – independently, immutably, and verifiable offline by your auditors with no account and no trust in the platform.

Signed

Each automated decision is sealed and signed at the moment it is recorded. The signature is stored with the record. Your organisation's own Ed25519 key signs every entry – we never hold the plaintext or the private key.

Chained & retained

Every entry binds to the previous one. The ledger is immutable: entries can only be appended, never edited or deleted. Retention is set per jurisdiction, and expired content is cryptographically erased while the record stays intact.

Verifiable & auditable

Your auditors can verify a receipt against your published key. No account or trust required. Auditors export the full record and verify it offline – no Decision Keep software or account needed.

How a Decision Keep record is built and verifiedA decision is signed with your key, linked into a tamper-evident chain, and verified offline by your auditors against your published key.1 · Decision2 · Signed3 · Chained4 · VerifiedYour key · tamper-evident chain · offline verification by your auditors
From automated decision to defensible evidence: signed with your key, bound into a tamper-evident chain, and provable offline by your auditors.

Public verification & attestation

Every receipt can be checked against your organisation's published key. Auditors at leading firms can verify automated-decision receipts independently and download a signed attestation report.

Open verifier →

How it works

A witness that never gets in the way

Decision Keep records every automated decision quietly, in the background – so capturing evidence never slows your systems, never interrupts your engineers, and never blocks a decision. The record is always there when you need to prove what happened.

Works with your AI systems

Your AI agents and tools can check their own decision trail at any time – without Decision Keep slowing them down. It slots into the systems you already run.

Zero impact on your apps

Recording a decision never freezes, blocks, or breaks your software. If we're ever slow or unavailable, your applications keep working exactly as before.

Your keys, your evidence

Every record is signed and chained so it can be checked at any time – even offline – against your own key. No account, no middleman, and no trust in us required.

Built for procurement

Audit-ready from day one. A full audit trail, strong security controls, and compliance coverage for the EU AI Act, GDPR and APRA – with independent certification (SOC 2 / ISO 27001) in progress.

See the Forensic Witness in action

Book a personalised demo with our team, or join the waitlist to be onboarded when a slot opens. Either way, we'll be in touch.

Book a demo

FAQ

Questions auditors, risk and legal actually ask

What is Decision Keep?+

Decision Keep is the Forensic Witness for Automated Decisions – an independent, tamper-evident record of every automated decision your organisation makes. It signs each decision with your own Ed25519 key, so the evidence belongs to you and can be checked by your auditors offline. Unlike traditional logging, the record is immutable and verifiable without trusting the platform. Read more in our documentation or blog.

How does automated-decision auditing work with Decision Keep?+

Each automated decision is sealed with a digital signature and linked to the one before it, forming a chain that cannot be changed without detection. Auditors and regulators verify the whole ledger offline using your published key. No account and no trust in the platform required. See pricing for engagement details.

How does Decision Keep support automated-decision transparency?+

It records the system, model, version and inputs behind each automated decision, and proves exactly when and by what version it was made. That satisfies automated-decision disclosure obligations such as Australia's APP 1.7–1.9, and supports equivalent requirements in other regions. Learn more about compliance in our docs.

Does it support the EU AI Act and GDPR?+

Yes. It meets the EU AI Act's automatic logging requirement, GDPR storage-limitation obligations, and the right to erasure through signed, verifiable erasure that preserves the integrity of the record. Decision Keep is designed specifically for the compliance challenges of the agentic era. Book a demo to discuss your specific obligations.

What is an independent time stamp?+

An optional time stamp from an independent authority that proves exactly when an automated decision was signed, anchored outside your control. It adds forensic proof of 'when' a decision was made. For regulated environments, we can integrate eIDAS-qualified trusted time as part of your enterprise engagement. Contact sales to learn more.

Can auditors verify receipts without an account?+

Yes. Verification is fully trustless and offline. Auditors use your published key and the exported ledger. No login, no access request, no trust in Decision Keep. Our public verifier lets anyone check a receipt in seconds, and auditors can download a signed attestation report.

How much does Decision Keep cost?+

Decision Keep is a paid product and pricing is scoped per engagement. We operate the vault and stand behind the deployment; pricing is an annual licence plus metered per-decision usage that covers the platform. Self-hosting is a contractual portability guarantee, not a separate product. Book a demo to discuss your plan.

What recording models are available?+

Decision Keep offers three recording models: Operator-signs (we hold your org key and sign on your behalf), Custodian (we host the ledger but your payload is sealed to your published key – zero-knowledge), and Client-signs (you sign in your own environment; the raw payload never reaches us). Each model is selectable per workspace. Compare models on the pricing page.

How does Decision Keep compare to traditional audit logs?+

Traditional audit logs are stored on systems you control, which means they can be altered or deleted. Decision Keep records every automated decision outside your systems as signed, immutable evidence. The chain is tamper-evident, and auditors verify offline without trusting the platform. See pricing or read our blog for more on the difference.

Is Decision Keep SOC 2 certified?+

SOC 2 certification is in progress. Decision Keep is engineered with security and compliance controls mapped to SOC 2, ISO 27001, EU AI Act, GDPR, APP 1.7–1.9 and APRA. We can include independent audits and advanced controls as scoped workstreams in your enterprise engagement. Contact us to discuss your audit requirements.