The Notary for AI
Seal every AI decision with a re-verifiable, post-quantum, on-chain proof. When the regulator asks “prove this model made this decision, and nobody changed the record,” you have the answer.
Built for EU AI Act Article 12 record-keeping and SR 11-7 model risk governance.
Pre-pilot. Integrate the open SDK today; enterprise SLA & sovereign deployment on request.
Up to 7% of global turnover
EU AI Act penalties for the worst breaches. Article 12 mandates automatic, tamper-evident record-keeping for high-risk AI from 2 Aug 2026.
A log you can edit is not evidence
Ordinary logs, dashboards, even hash-chained databases can be re-written by whoever controls them. That does not survive cross-examination.
Quantum is a records problem too
Records you sign today must still verify in a decade. We sign with Dilithium-2 (NIST FIPS 204), resistant to known classical & quantum attacks.
One SDK call. Four cryptographic guarantees.
Wrap your model call. Each decision becomes a self-contained attestation you persist next to your logs.
Provenance
These exact bytes — sha256(input) and sha256(output) — were signed by the notary's post-quantum key.
Integrity
Change a single byte of input, output, model, version or time, and re-verification fails.
Non-repudiation
A Dilithium-2 signature the operator cannot forge or later disown.
Freshness
Bound to a signing time and best-effort anchored on-chain (external, immutable time).
Integrate in 5 lines
import { NotaryClient } from '@fractalai/ai-notary';
const notary = new NotaryClient();
const attestation = await notary.attest({
model: 'credit-risk-v4', modelVersion: '2026-06-20',
input: JSON.stringify(features), output: 'DECLINE', confidence: 0.91,
});
// later — an auditor, no DB trust required:
const { valid } = await notary.verify(attestation);Live proof — attest, then try to tamper
This calls the same production endpoints the SDK uses. Seal a decision, then flip the outcome to “APPROVE” — watch the signature reject it.
Why not zkML, DataRobot, or Fiddler?
| zkML | DataRobot / Fiddler | AI Notary | |
|---|---|---|---|
| Sub-second, cheap per decision | Impractical (heavy proving) | — | Yes |
| Cryptographic non-repudiation | Proves computation, not signed provenance | No | Yes (PQC signature) |
| Post-quantum | Rarely | No | Yes (Dilithium-2) |
| On-chain anchored (external time) | Optional, costly | No | Yes (best-effort) |
| Sovereign / on-prem deployable | Varies | SaaS only | Yes (self-host) |
We are the only stack combining sub-second + post-quantum + on-chain + sovereign. zkML proves a computation ran but is too slow/costly for per-decision logging; monitoring tools produce reports with no cryptographic non-repudiation.
What it proves — and what it does not
An attestation proves the provenance, integrity, non-repudiation and freshness of a declared decision. It does not prove the decision was correct, fair, unbiased or complete, nor that no decision was omitted. It is a notary, not an auditor of reasoning. Dilithium-2 is resistant to known classical and quantum attacks per NIST FIPS 204 — not “unbreakable.” We say this plainly because a claim you cannot defend in an audit is worse than no claim.
Enterprise pricing
Proposed tiers, priced to the cost of a single EU AI Act fine you avoid. Final terms are set with your team.
Design Partner
For a first high-risk use case. Co-design the integration with our team.
- 1 model / decision stream
- Open SDK + priority support
- Shared deployment
- EU AI Act Art. 12 mapping
Enterprise
Production non-repudiation across your model portfolio.
- Multiple models / high volume
- 99.9% SLA
- On-chain anchoring
- Auditor-ready evidence exports
- SR 11-7 alignment
Sovereign
Your own notary node — full data residency and key custody.
- Dedicated / on-prem deployment
- You hold the signing keys
- Custom chain anchor
- Regulatory support
- Everything in Enterprise
Prices are indicative proposals, not a binding offer. No customers are implied — we are pre-pilot.
Sleep at night in front of the regulator
Book a 30-minute technical walkthrough. We'll map your highest-risk AI decision to a re-verifiable, post-quantum attestation — live.
Package: npm i @fractalai/ai-notary