Evidence you don't have to trust us for
Governance software is full of promises about immutable audit trails. Aicura's Evidence Vault is different in kind, being sealed, cryptographically anchored and checkable by a third party with an open-source verifier, without trusting Aicura at all.
"Immutable" usually means "trust our database"
Across AI governance software, the words immutable, tamper-evident and system of record almost always describe one thing, an append-only log inside the vendor's own infrastructure. The promise is real as far as it goes, but verifying it still requires trusting the vendor's system. If the question is ever serious, a record whose integrity depends on the party that produced it is a weak place to stand.
Aicura took the other path. Evidence in the Vault is sealed and anchored with Merkle trees, timestamped by an external service and signed with external keys, and the verifier is open source. A regulator, an auditor or a customer can check that the evidence existed when you say it did and has not changed since, without Aicura in the loop.
The proof layer, end to end
Evidence Vault. The append-only, sealed store holding your assessments, decisions, policies, attestations and the artefacts behind them, captured as the work happens rather than assembled for the occasion.
Evidence Packs. When a regulator, auditor or customer asks, you hand over a package they can verify themselves, scoped to what they need.
Attestations. Sign-off by the accountable owner, signed with external keys including post-quantum schemes, so accountability is evidence rather than an assertion.
The independent verifier. Open-source tooling that checks the anchoring, timestamps and signatures without access to Aicura, which is the whole point.
Trust Centre. A published, version-anchored view of your AI governance position, so external questions start from a current artefact instead of a blank page. Enterprise adds evidence freshness, which keeps watch on how current the record is.
The Evidence Vault records at every tier, so nothing you do on a lower tier is lost when you move up. The Vault surface, Packs and attestations are part of Pro.
Why this matters more the smaller you think we are
The fair question about any young vendor is what happens to your records if the vendor goes away. With Aicura the answer is unusual, because nothing happens to them. The anchoring is external, the timestamps are external, the signatures use external keys and the verifier is open source, so your evidence outlives any vendor, ours included. Buyers who want further separation can deploy Aicura in their own VPC or private cloud.
For the reasoning in full, the guide on what makes AI governance evidence independently verifiable walks through the distinction, and the evidence hand-off scenario shows it end to end.
Evidence questions, answered
Ask any vendor this question
Can a third party verify your audit trail without access to your systems? Ask it of everyone you evaluate, including us. We are the ones who want you to ask.
Talk to usAicura Pty Ltd. AI governance support SaaS built for Australian organisations.