Platform
When someone asks what happened, your AI governance evidence is already there
An auditor, a customer or a regulator asks to see what happened to one of your AI systems, and when. Aicura's Evidence Vault means that AI governance evidence already exists. It takes a snapshot, a dated copy, of each moment that matters as your team works, from an approved model card to a blocked request, and nobody has to file anything by hand.
Included in Pro and Enterprise. Compare plans
Snapshots
Evidence taken as the work happens
The hard part of an audit is rarely the work. It is proving when the work was done, months later, from email threads and memory. The Evidence Vault takes care of that while your team gets on with the job.
Nothing is filed by hand
A snapshot is a dated copy of a moment that matters for governance. Aicura takes one whenever something like this happens.
- A model card is approved
- A guardrail version is published
- Ownership of a system is recorded
- A role or a user's access changes
- Someone completes a training course
- The Trust Centre is published
- The gateway blocks, redacts or escalates a request
Every enforcement is snapped. Allowed requests are rolled up into batches rather than snapped one by one, so the vault stays readable.
Find what you need, then hand it over
The vault is laid out by what each snapshot is about, such as a system, an agent, a model, an assessment, a guardrail, a policy, a vendor, an incident or a training course. Under each one, snapshots sit against the version they belong to, so you can see a system as it stood at any point.
- Browse by subject and version, filtered by kind and by time window.
- Search by meaning as well as by text, for when you know what happened but not what it was called.
- Download any snapshot or share a link to it.
Evidence packs
A bundle made for the person asking
An auditor, a risk committee and a customer's due-diligence team each want a different slice. An evidence pack gives each of them the snapshots they need and nothing else.
Start from a template, choose what goes in
Generate a pack from a template. Some templates are keyed to a framework, and you can write your own. Aicura lists the candidates the template covers, you choose what goes in and what to skip, and the pack is sealed.
Sealing fixes the pack. Each request gets a fresh pack, so one you handed over last quarter stays exactly as it was handed over.
Formal sign-offs
Sign-offs your people sign with their own keys
Some moments need a named person to put their name to them. An owner confirms a system is fit to go live, or an approver accepts a risk assessment.
Signed by the person, checked against keys you register
In Aicura a formal sign-off is called an attestation. It can be added to a register entry, a lifecycle change, a risk or impact assessment, or the published set of risks and controls.
Each attestation is signed by the signer's own key. You register your signers and their public keys in Settings, and Aicura checks every signature against them. Private keys stay with the signer, and Aicura never holds them.
Signers can use SSH, PGP or Ed25519 keys, or post-quantum keys such as ML-DSA-65, which are designed to stay secure against future quantum computers.
Checking it independently
A reader can check a snapshot without taking your word for it
Snapshots are sealed when captured and anchored to public infrastructure shortly afterwards. A downloaded evidence pack includes instructions for checking it, and an open-source verifier runs the check without calling Aicura at all. Signed sign-offs can also be re-checked against the signers' public keys with Aicura out of the loop.
The guarantee is about the snapshot, not the judgement. A check shows what was captured and when, and that it has not changed since. It does not show that what was captured was correct. A very recent snapshot can show as captured before it shows as anchored, which is the normal order. Snapshots carry none of Aicura's internals, such as prompts, scoring or rule sets.
Evidence Vault is the subject of pending patent applications.
Questions
What is an AI audit trail?
An AI audit trail is the evidence of what happened to an AI system and when, such as who approved it, which rules applied and what was blocked. In Aicura it is kept in the Evidence Vault, which takes a dated snapshot of each governance moment as the work happens, so the trail exists before anyone asks for it.
What evidence do auditors ask for about AI?
Auditors usually ask to see that AI systems were assessed, approved, owned and controlled, and when each of those happened. The Evidence Vault holds snapshots of those moments, such as an approved model card, a published guardrail version or an enforcement batch, and an evidence pack gathers the ones a particular reader needs into one bundle.
Is the Evidence Vault the same as an audit log?
No. Aicura's audit log, on every plan, is the operational history of every change in the app, with each changed field before and after. The Evidence Vault holds dated snapshots of the moments that matter for governance, such as a published guardrail version, an approved model card or a batch of enforcement events.
Do we have to upload evidence to the vault?
No. Aicura takes the snapshots itself as your team works, when a model card is approved, a guardrail version is published, ownership is recorded or the gateway blocks a request. Every enforcement is snapped, and allowed requests are rolled up rather than snapped one by one. Nothing is filed by hand.
Can someone outside our organisation check a snapshot has not changed?
Yes. A downloaded evidence pack can be checked with an open-source verifier that runs without Aicura, against public infrastructure. It confirms a snapshot was captured when it says and has not changed since. It does not confirm that what was captured was correct.
Does an evidence pack certify our AI governance?
No. An evidence pack sets out snapshots of your own work at the time it was captured. Aicura provides support and guidance, not certification, audit or legal advice. The reader draws their own conclusions from what you show them.
Have the evidence ready before anyone asks
The Evidence Vault, evidence packs and signed sign-offs are part of Pro. Contact us about who asks to see your AI governance and what they need.