Use case · Audit

Evidence they can check without calling you.

An auditor should not have to trust you. Every decision Raidu makes is tamper-evident and written to write-once storage. Records are linked so any change shows. Download the proof pack and hand it to the auditor.

Runs in your cloud, on your premises, or air-gapped. No managed SaaS.

Last reviewed

Illustrative. No customer data.

The difference

Their way, and ours.

Their wayRaidu
A PDF report the auditor has to take on trust.A proof pack with records linked so any change shows.
Evidence gathered the week before the audit.Evidence written as each decision happens, tamper-evident and chained.
Log in to our portal to see the evidence.One file, self-contained. Records are linked so any change shows.

How Raidu handles it

From decision to verified proof.

  1. 01

    Every decision goes on record.

    Each record is hash-chained and linked to the one before. Database triggers refuse updates and deletes. Write-once storage, 10-year retention.

  2. 02

    Evidence is bundled into a proof pack.

    The proof pack holds the evidence chain, the tamper-evident receipts and the public keys. It is byte-identical on every download.

  3. 03

    The chain shows any change, claim by claim.

    Records are linked so any change shows. The pack returns proven, failed or unprovable per claim. Unprovable means the evidence does not cover the claim, not that the claim passed.

The product

See the screens.

Product windows from the films, with sample data. No customer data.

Common questions

Answered straight.

Does the auditor need to contact Raidu or us?
No. The proof pack is self-contained. It includes the evidence chain, the tamper-evident receipts and the public keys.
What does unprovable mean?
The evidence does not cover the claim. Raidu reports it as unprovable rather than passing it. A failed result means the chain did not verify.
How are records protected from alteration?
Records are hash-chained and linked to the one before. Database triggers refuse updates and deletes. Records are anchored outside the database.
How long are records retained?
Write-once storage with 10-year retention. Content can be erased for GDPR compliance while the record keeps the chain verifiable.
Which frameworks does the evidence help with?
The records support the evidence that rules such as the EU AI Act, NIST AI RMF and India’s DPDP Act ask for. Raidu’s own assurance is a SOC 2 Type II report (Security, Availability and Confidentiality), ISO/IEC 27001:2022 certification for the ISMS of the Tower platform and supporting cloud infrastructure, and independent assessments as HIPAA compliant and GDPR compliant.

Every decision on record. Records are linked so any change shows.