Tower (AI protection) · Evidence and Audit

An AI audit trail nobody can quietly change.

Change one row and the chain says where. Every decision Raidu makes is written once, hash-chained to the one before it. Nobody can edit the record quietly, including us.

Runs inside your AWS, GCP or Kubernetes install.

Last reviewed

Book a working session Watch it work

Illustrative. No customer data.

The difference

Their way, and ours.

Their wayRaidu
Logs an admin can edit.Rows the database refuses to update or delete.
Trust our dashboard.Hashes you can recompute yourself.
Kept for a year, somewhere.Ten-year write-once retention, in your cloud.

SHA-256 per record, chained by previous hash, anchored outside the database, and kept write-once for ten years.

Source: Tower signing services and write-once database storage

The record

The record that proves itself.

Every tamper-evident record chains to the one before it. Break the chain anywhere and verification shows the exact row.

Entry 4,183 Follows entry 4,182 · 14:02:12Z
Previous hash
3a7b9f2c...c841
This hash
f9c24a1e...e037
Record
Tamper-evident
Chain status
Verified
sha256 7e63416e0e79e18a329765c2bb002946…
entry 4,183 of 12,847 · write-once

The call path

Where the record is written.

  1. InterceptEvery SDK and console call
  2. ResolveWho, which model, which data
  3. InspectPolicy checks on the full prompt
  4. DecideBlock, redact or allow
  5. ProveEvery decision, written once and tamper-evident

Also covered

  • Tamper-evident records
  • Hash chain
  • External anchor
  • Write-once storage
  • Erasure-safe

Common questions

Answered straight.

Can an admin delete a row?
No. Database triggers refuse updates and deletes on the ledger.
What about GDPR erasure requests?
The content is stored by reference and can be erased; the hash stays, so the chain still verifies.
How are records made tamper-evident?
Each record is SHA-256 hashed and chained to the previous record’s hash. The chain anchors outside the database, so any edit breaks it at that point.
How long are records kept?
Write-once for ten years, inside your own cloud.

Related

A record nobody can quietly change.

Book a working session