Records Witness provides automated compliance assurance software that monitors and proves the integrity of regulatory records across existing cloud systems, with particular focus on EU AI Act readiness. The platform connects to GCS, SQL, Firestore, GitHub, and APIs to observe records in place without requiring data migration or reformatting. Its drop-in connectors work across multiple systems, enabling real-time monitoring of millions of records while avoiding vendor lock-in.
Funding
Funding not disclosed
Founders
Product
Problem
Starting in 2026, the EU AI Act requires AI systems to maintain detailed records covering everything from decision flows and prompts to user consent, with fines up to €35 million or 7% of global revenue for non-compliance. Many organizations lack tools to verify that critical records are being retained and kept immutable across distributed systems, making compliance difficult to prove.
Solution
Records Witness provides an automated assurance layer that monitors regulatory records wherever they live, including GCS, SQL, Firestore, GitHub, and API-connected systems. The platform runs quietly in the background, flagging retention issues, monitoring record immutability, and proving records are kept for required durations. Its architecture observes millions of records across disparate systems using connectors that require zero changes to existing infrastructure—no extraction, duplication, or schema rework. This approach enables organizations to demonstrate compliance through verified facts rather than manual attestations, with a portal offering full visibility and control across the organization.
Target Audience
Primary customers are AI system providers and enterprises in healthcare, finance, and other regulated sectors that must comply with EU AI Act record-keeping obligations starting in 2026.
Features
- Native connectors for GCS, SQL, Firestore, GitHub, and APIs that observe records in place without migration or reformatting
- Real-time monitoring of record retention and immutability across millions of records spanning multiple systems
- Compliance-specific tooling for EU AI Act requirements, including tracking of decision logs, training data, and user consent
- No lock-in architecture that allows organizations to migrate and remigrate systems without being bound to the compliance platform's infrastructure
- Background monitoring with automated flagging of issues as they arise
- Centralized portal providing organization-wide visibility and control over compliance status