Audit-Ready Documentation

Auditor-friendly evidence packs

Every AI decision automatically documented with cryptographic proof receipts, policy snapshots, and compliance metadata. Search years of history in milliseconds. Export for regulators with one click.

Complete Audit Trail Features

Everything auditors and regulators need in one place

Advanced Search

Full-text search across requests, responses, and policy decisions. Filter by date, user, model, compliance status, or custom tags. Millisecond response times even with millions of records.

Evidence Exports

Export audit trails in regulator-friendly formats: PDF reports, CSV spreadsheets, JSON-LD for systems, or complete evidence packs with proofs and policies bundled.

Historical Queries

Query any time range from the last hour to 7+ years of retention. Immutable storage ensures audit trails can't be retroactively altered.

Policy History

Every decision linked to the exact policy version active at that time. Prove which rules were enforced on any given date—critical for regulatory audits.

Regulatory Mapping

Automatically tag decisions with relevant regulations: EU AI Act Article 12, GDPR Article 22, CCPA, or custom compliance frameworks. Filter by regulatory requirement.

Granular Access Control

Control who can view, export, or share audit trails. Audit log access is itself audited. SSO/SAML integration with Okta, Azure AD, Google Workspace.

What's in an Evidence Pack

Complete Documentation Bundle

Proof Receipts
All cryptographically signed receipts for the time period, individually verifiable
Policy Snapshots
Exact policy versions that were active, with Git commit SHAs for reproducibility
Request/Response Logs
Complete AI interactions with PII redacted per GDPR requirements
Compliance Summary
Executive summary mapping decisions to regulatory requirements
Verification Tools
CLI binaries and public keys for independent signature verification

Export Formats

For Auditors

  • PDF reports with embedded signatures
  • Excel/CSV for spreadsheet analysis
  • ZIP archives with complete evidence

For Systems

  • JSON-LD with structured metadata
  • NDJSON for streaming/line-delimited
  • Parquet for data warehouse ingestion

For Compliance Teams

  • Pre-formatted regulatory reports
  • GRC platform integrations (OneTrust, Vanta)
  • Custom templates for your frameworks

Retention & Immutability

7-Year Retention

Default 7-year retention matches EU AI Act Article 12 requirements. Configurable up to 10 years for regulated industries (financial services, healthcare).

Immutable Storage

Write-once, read-many (WORM) storage prevents tampering. Deletions are logged and require dual authorization. Blockchain anchoring optional.

Data Residency

Store audit trails in your geography of choice: EU, US, UK, or on-premises. Never crosses borders without explicit consent.

Encryption at Rest

AES-256 encryption for all stored audit data. Customer-managed keys (BYOK) supported for maximum control.

Backup & DR

Daily encrypted backups to geographically separate regions. 99.99% durability SLA. Point-in-time recovery up to 30 days.

GDPR Right to Erasure

Pseudonymization and selective redaction support GDPR Article 17. Proof receipts remain valid even after PII removal.

Real-World Audit Scenarios

SOC 2 Type II Audit

"Show us evidence that your AI access controls were consistently enforced over the last 12 months."

  • Export 12 months of policy enforcement logs with proof receipts
  • Include policy version history showing no unauthorized changes
  • Auditor independently verifies signatures—no trust in Railguard required

EU AI Act Article 12 Inspection

"Demonstrate record-keeping for all high-risk AI system decisions from January to March 2024."

  • Filter by date range and high-risk classification tags
  • Export PDF report mapping each decision to Article 12 requirements
  • Include compliance summary showing 99.97% policy adherence

GDPR Data Subject Request

"A user submitted a GDPR Article 15 request: 'Show me all AI decisions made about me.'"

  • Search by user ID to find all relevant decisions
  • Generate plain-language explanations (GDPR Article 12 compliant)
  • Export user-friendly PDF within 30-day legal deadline

Security Incident Investigation

"A policy violation was detected on Oct 15. Trace what happened and who was involved."

  • Search for all decisions on Oct 15 with "blocked" status
  • Review request details, policy evaluation trace, and response
  • Export evidence pack for internal security review

Audit-ready from day one

No more scrambling when auditors arrive. Every AI decision is automatically documented, cryptographically verified, and ready to export on demand.

Audit Trails - Evidence & Compliance | Railguard AI | Railguard AI