Runtime evidence

How proof works

Governance tools approve AI for production. Quantlix produces operating-effectiveness evidence — tamper-evident, time-stamped records that controls actually fired on live traffic. Quantlix does not declare conformity; it produces the evidence an auditor relies on to assess it.

The seven evidence artifacts

The same evidence base serves whichever management system the control sits under — ISO 27001, 27701, 31000, 42001, GDPR, ISO 22301, or the EU AI Act. The standard changes; the underlying record does not.

1. Hash-chained trace store

Every request produces a trace capturing the full lifecycle: input (post-redaction), model and parameters, each policy decision and verdict, output, latency, cost, and provider. Records append to a per-tenant ledger where each entry carries a digest of the prior entry. Segments anchor to the public Sigstore Rekor transparency log so a third party can verify integrity without trusting Quantlix.

Serves: ISO 27001 logging controls · EU AI Act Art. 12

2. Enforcement records

Each request generates an enforcement record: which policy version was in force, which rules were evaluated, the verdict, and the reason. The policy version is pinned to each decision — not reconstructed afterward. Records are filterable by verdict, rule, policy, date, deployment, and environment.

Serves: ISO 27001 · ISO 31000 · EU AI Act Art. 9

3. Redaction / PII events

When the boundary detects personal data, it records what category was detected, what action was taken, and at what latency — without retaining the PII itself. Per-rule evidence that data-minimisation controls fired on live traffic.

Serves: ISO 27701 · GDPR · EU AI Act Art. 10

4. Provider & model attribution

Every call records the provider and model that served it, with per-deployment activity rollups. When a request fails over from its primary provider, a failover event records the primary and fallback provider and the reason on the request trace.

Serves: ISO 27001 supplier controls · ISO 22301

5. Approval-gate & human-oversight records

Where a workflow routes a decision to a human, the approval or rejection is logged with user identity, timestamp, and the request it applies to. Role-based access governs who may approve, override, or stop a deployment; stop events log the actor, timestamp, and reason.

Serves: ISO 42001 · EU AI Act Art. 14

6. Eval & adversarial-detection records

Eval suites run on deployment candidates and in production; a candidate that regresses below threshold is blocked, and the result (pass/fail, suite version, scores) is logged. At the request boundary, prompt-injection and jailbreak detections are logged with the rule and confidence signal.

Serves: ISO 42001 · EU AI Act Art. 15

7. Exportable audit bundle

On demand, Quantlix composes a manifest-led bundle in PDF, CSV, or JSON containing policy configuration, enforcement logs, redaction evidence, provider activity, change history, an AI-register extract, attestations, and a coverage statement — each stamped with catalogue version and policy versions in force. Exports ship with HOW_TO_VERIFY.txt, bundle.json, and verify_audit_bundle.py.

Serves: The audit deliverable — independently verifiable by external reviewers

Independent verification — no Quantlix login

PDF and CSV audit-bundle exports ship as zip files. Each zip includes bundle.json, HOW_TO_VERIFY.txt, and the standalone verify_audit_bundle.py script — the strongest enterprise signal: a reviewer can confirm manifest digest and Rekor anchors without a Quantlix account.

  1. Unzip the export (PDF or CSV format) — you receive bundle.json, HOW_TO_VERIFY.txt, verify_audit_bundle.py, and audit_bundle_verify_lib.py.
  2. Run python verify_audit_bundle.py bundle.json — checks manifest content digest and internal integrity references.
  3. When Rekor UUIDs are present, the script confirms segment Merkle roots match public Rekor log entries (or use --offline with embedded rekor_entry_b64 snapshots).
  4. Without Quantlix software: open each Rekor lookup URL from HOW_TO_VERIFY.txt and confirm spec.data.hash.value matches the segment Merkle root in the manifest.
pip install httpx
unzip audit-bundle.zip
python verify_audit_bundle.py bundle.json
python verify_audit_bundle.py bundle.json --json
python verify_audit_bundle.py bundle.json --offline

Verification checks internal consistency of the exported bundle and, when Rekor anchors are present and passing, public-log anchoring of listed segment Merkle roots. It does not prove completeness of your AI estate (see the Coverage section) and is not a compliance assessment. To prove the artifact has not changed since export, compare manifest.content_digest with a trusted external copy. A passing digest check alone does not prove completeness, compliance, or authenticity of the export source.

Full trace-integrity details: Trust center → Trace integrity · Verify an audit bundle

Cross-standard mapping

Quantlix is not an "AI Act tool" alone. The evidence maps across the standards your integrated management system already uses — so risk, security, privacy, and audit teams can justify it in their own frameworks.

Evidence typeStatusStandard fit
Policy enforcement at runtimeEvidenced27001 / 31000 / 42001
Request & response loggingEvidenced27001 / AI Act Art. 12
PII detection & redactionEvidenced27701 / GDPR
Provider attribution per callEvidenced27001 supplier mgmt
Provider failover / availabilityEvidenced27001 / 22301
Adversarial input detectionEvidenced42001 / AI Act Art. 15
Eval-gated promotionEvidenced42001 / AI Act Art. 15
Approval-gate decisionsEvidenced42001 / AI Act Art. 14
Deployment stop controlEvidenced42001 / AI Act Art. 14
Reviewer access & activityEvidenced27001 access control
AI system inventory / estatePartial — register evidenced, completeness attested42001 / AI Act Art. 26
Organisational risk processRequires attestation31000 / 42001
Training-data governanceOut of scope (upstream of runtime)
Conformity assessmentOut of scope (qualified body, not a platform)

Evidenced vs. attested — the honesty boundary

Quantlix is explicit about what runtime data can and cannot prove. Obligations backed by stored traffic are marked evidenced; obligations that need a human statement (estate completeness, organisational process, documentation completeness) are marked requires-attestation, with an owner and review date. An obligation only moves to the evidenced side when a stored field backs it.

We produce the evidence; your advisor, auditor, or notified body renders the judgment. Quantlix does not declare anyone "compliant" or "safe."

See the live obligations map in-product: EU AI Act readiness evidence

Sample audit bundle & enterprise pilot

Download an illustrative bundle JSON to inspect structure, section layout, and manifest fields. Synthetic data only — not exported from a live tenant. Rekor anchors are omitted; automated Rekor verification reports SKIP on this sample.

For a pilot with your own traffic, scoped deployments, and a real export: book an enterprise pilot. Production bundles are generated from Dashboard → Audit bundles.

Capabilities described as of June 2026. Technical reference only — not legal advice or a compliance assessment.

How proof works — Quantlix — Quantlix