The three things audit and compliance ask, that today nobody can answer.
“Show me the controls applied to this agent decision.”
Every Vortalis decision carries the policy that was applied, the inputs the policy saw, and the outcome. One record per decision. Searchable. Exportable. Versioned.
“Prove this evidence has not been altered.”
Records are signed and chained. Your auditor verifies the chain offline using an open-source command-line utility we provide that runs locally. They do not depend on Vortalis being available, and they do not need a contract with us to verify.
“Map your controls to my framework.”
We maintain the mapping between Vortalis controls and the obligations under the major UK and EU frameworks for AI in financial services and other regulated sectors, including AI-specific and information-security standards. Mapping is delivered as evidence in a structured pack your auditor recognises.
What you receive.
- An evidence pack per decision, per agent, or per population, on request or on schedule.
- Offline verification tooling for your auditor.
- A regulatory coverage map covering the frameworks your supervisor cares about.
- Configurable retention, redaction, and export controls.
- A documented control narrative your auditor can attach to a working paper.
On the regulatory coverage map.
The full mapping is shared under a sales conversation rather than published openly. This is for two reasons. First, the mapping is current and we want to keep it current for you specifically rather than have a static page age in public. Second, the crosswalk represents real work and real IP, and we share it with serious buyers.
Get the regulatory coverage mapRelated reading: AGAP audit and conformance · EU AI Act mapping
Show this to your audit lead first.
Bring an actual control you need to evidence, or a finding from your last audit you do not want to repeat. We will show how Vortalis would have produced the evidence, in a format your auditor recognises.
See a sample evidence pack