Defensibility under three different lights.
“Client says they're 'mostly compliant'. Show me what they actually have.”
“M&A target's AI estate is a black box. We need a diligence summary in 48 hours.”
“If we get an Art. 99 information request, can we produce the evidence inside the deadline?”
Built for the conversation that starts 'show me'.
Tamper-evident audit trail
Dossier entries form a hash chain; verifyDossierChain surfaces breaks rather than swallowing them. The integrity property is the audit artefact.
Regulator-view dossier
A separate PDF rendering with marginalia article references and Fraunces display type. Designed to read as authoritative on a regulator's desk.
Public verify URL
verify.veritome.eu/d/<id> — anyone can check the seal without an account. M&A diligence, regulator handoffs, customer due diligence all use the same mechanism.
Per-action audit log
Every mutation logged: classification change, obligation status flip, evidence upload, dossier-entry submission. User, timestamp, before/after — exhaustive.
Multi-client RBAC (firms)
Law firms manage multiple client orgs from one account; permissions enforced at the API. Conflicts walls per-engagement, not global.
Article-anchored everything
Every screen carries the article reference. Deposition prep doesn't need a translation step — the system speaks the same language as the regulation.
Three legal contexts, one source of truth.
A boutique law firm advising 50 SME clients on AI Act readiness.
- Multi-client architecture — one firm account, fifty client orgs.
- Standardised playbook: readiness check → classification → obligation map → evidence collection per client.
- The regulator-view dossier is the deliverable; clients receive it as a PDF + verify URL.
- Audit-trail recovery if a regulator request lands at one client; the chain reads start-to-end.
M&A diligence team examining an AI-native target's compliance posture.
- Target hands over a verify URL; diligence team reads the seal without portal access or NDA blockers.
- Hash chain confirms integrity — no quiet edits during the diligence window.
- Per-system dossier exposes classification reasoning, obligation status, evidence completeness.
- Findings feed straight into the rep-and-warranty schedule.
In-house GC fielding an Art. 99 information request from a national authority.
- Audit log shows every action on the named system across the inspection window.
- Dossier entries (Art. 6 self-exclusion, Art. 6(4) authority notification, conformity assessment, IFU handoff) numbered and hashed.
- Phase-gate attestations record exactly when each phase passed 100% — not 'around April'.
- Response pack assembles in a working day, not three weeks.