Platform Features

Evidence infrastructure for regulated AI deployments.

Tamper-Evident Runtime Evidence

An append-only, cryptographically chained record of AI-assisted decisions recorded through the Obrioxia integration. Your integration submits selected references, hashes, material facts and workflow events to Obrioxia through the authenticated Runtime Evidence v2 integration.

  • ► Cryptographic chaining ensures historical records cannot be silently altered without detection.
  • ► Deterministic serialisation supports independent verification and portable verification packs.
  • ► Authenticated Runtime Evidence v2 ingestion with workflow correlation, tenant-scoped access, and caller-reported provenance clearly labelled as such.
  • ► Idempotent evidence capture — safe retries without duplicate records.

Decision Case Reconstruction & Verification

Reconstruct Decision Cases across correlated workflow events, surface explicit missing evidence and obligations, and validate the integrity of captured records and checkpointed evidence.

  • ► Decision Case reconstruction and evidence-gap reporting, with specification coverage separated from case completeness.
  • ► Integrity verification across captured records and checkpointed evidence via the Obrioxia Hub and API.
  • ► Any modification — even a single byte — breaks the chain and is detected on verification (subject to the anchoring interval).
  • ► Look up any captured record by ID, hash, or workflow correlation — the verifier handles the rest.
  • ► Integrity checks across the evidence and proof material in scope.

Evidence Certificates & Portable Verification Packs

Downloadable verification material containing the cryptographic receipt and a human-readable summary of non-sensitive fields to support internal review, audit, and regulatory inquiries. Sealed PII fields are not rendered in the certificate.

  • ► PDF audit certificates for non-technical stakeholders.
  • ► Machine-readable proof material and portable verification packs available via the verification API.
  • ► Self-contained cryptographic proof material for offline integrity verification.
  • ► Tenant-scoped access: certificate generation is restricted to authorised callers for that tenant.

Compliant Erasure (Application-Layer Redaction & Key Destruction)

For workflows using sealed PII fields, revoke application-layer access to protected payloads by redacting fields or destroying the per-event encryption key while the tamper-evident chain remains verifiable.

  • ► Selected PII fields can be cryptographically sealed at ingestion where configured.
  • ► Controlled erasure revokes application-layer access to sealed fields while preserving the structural hash chain (pre-erasure snapshots may persist in backups within the retention window).
  • ► Non-sensitive audit metadata remains intact so structural chain verification can continue.

Configurable Evidence Retention

Retention periods and redaction policies are governed by deployment settings and agreed commercial controls, preserving the structural verifiability of the audit chain.

  • ► Retention windows are configured according to your deployment settings and service plan.
  • ► Where configured, expired records undergo application-layer redaction or per-event key destruction.
  • ► The tamper-evident chain remains intact after expiry. Verification continues to pass.
  • ►Note: Retention schedules and enforcement depend on the deployment settings configured for your environment.

Obrioxia Hub

The central command center for managing your audit streams, verifying chains, and executing controlled erasure operations.

  • ► Real-time Event Logger for system testing and integration.
  • ► Built-in Chain Verifier for instant health checks.
  • ► Admin panel for authorized compliant erasure actions.
  • ►Analytics: Visual dashboards for decision trends, chain health, and anomaly detection.
  • ► Entitlement dashboard: view your tier, event usage, and remaining quota.
  • ► Evidence PDF download with ownership verification.
  • ► API keys are generated inside the Hub and require an active subscription.

Client SDK & Developer Tools

Comprehensive tools for integration, key management, and forensic data export.

  • ►Export Bundle — Everything needed for client-side decryption.
  • ►Key Management — Admin-only endpoints manage encryption keys securely.
  • ►API Key Management — Create, list, and revoke API keys.