Court- and regulator-grade evidence for AI-agent and audit workflows.

ActaSeal sits in front of money-touching agent actions as a policy gateway. Every decision it makes -- allow, block, or route to a human approver -- is written to a tamper-evident ledger and returned to the caller as an Ed25519-signed receipt. The receipt, not ActaSeal's word, is the evidence: it can be checked offline, years later, by a party who has never run ActaSeal and does not trust the vendor.

Below is an excerpt of a real receipt minted by the gateway's own default refund policy, binding the merchant's terms document into the signed payload (terms_hash) so the terms in force at decision time cannot be swapped after the fact.

{
  "decision": "ALLOW",
  "reason_code": "POLICY_ALLOW",
  "policy_hash": "9c54da05406442e71a1afe92a5c548f3b30758f9825bfb71ed201a512cff3dce",
  "action_hash": "14c55c4f8792690b37b63600042944122cccf92b931d68b009fe7c07ac627140",
  "ledger_entry_hash": "96f7b13d7ae398134635498a7ffc670750e0c791f243e81b7bfcb8ab31753f81",
  "terms_hash": "5bc04174974fc7cd5d97dd6fe17e79549004f713f1d1e7956aa7fd8bf096259b",
  "signature": "af9de4214f73e89b6a6d9b252bed62f355a05ccbf12097921aa890cab3d8eb4...",
  "algorithm": "ed25519"
}

Verify a receipt like this yourself, offline, using only the public key and the standalone verifier -- no ActaSeal account or network call required.

Three groups, three specific consequences avoided

Audit firms

PCAOB AS 1215 archive integrity (workpapers cannot be altered after the documentation completion date without it being provable) and QC 1000 / ISQM 1 monitoring and remediation evidence for the firm's own quality-management system.

Legal hold and med-mal

FRCP 37(e) preservation of electronically stored information when litigation is reasonably anticipated, and an FRE 902(13)/(14) self-authenticating certification package for records generated or copied by an electronic process.

Agent-commerce disputes

An LCP (Legal Context Protocol) binding profile that ties the terms a merchant agent relied on into the signed decision receipt itself, so "what terms were actually in force" is not a matter of testimony after the dispute starts.

These are the standards ActaSeal's exports are built to address. ActaSeal is not certified under any of them; certification, where applicable, is the customer's own process.

Every claim on this page links to something that exists

• Public offline verifier -- verify.actaseal.com
• actaseal-verify v0.1.0 release
• Conformance vectors (public repo, signed/tampered/checkpoint cases)
• IETF draft-xg-payment-dispute-profile-00 -- card-scheme dispute evidence profile
• SCITT architecture issue #461 -- evidence-binding trust-boundary finding filed by ActaSeal
• SCITT architecture issue #462 (opened by maxchop) -- ActaSeal contributed the verification-result requirements and an implementation entry
• SCITT architecture PR #463 -- Receipt Profile requirements for verification results, plus an Implementation Status section
• Legal Context Protocol PR #4 -- the terms-binding profile itself, open for review
• agentic-resolution-interop PR #22 -- a real ActaSeal receipt submitted as a conformance evidence item

What is free forever, what is licensed

An unlicensed deployment still runs and still produces cryptographically valid exports -- they are simply watermarked as an unlicensed evaluation copy rather than refused. Request a licence

Self-hosted, air-gapped, or hosted

Self-hosted

docker compose up --build against your own infrastructure; see the docs quickstart.

Air-gapped

Air-gapped mode fails closed on every external-witness integration (object-lock anchoring, transparency-log anchoring, TSA, SSO) instead of silently degrading.

Hosted

A dedicated deployment for your organisation, run by us -- ask about hosted.