run.veric.dev
◆ Design partner previewCompliance Vault — sample data, real contracts.
Schedule a DP conversation →

Layout, contracts, and data shapes are real. The data shown is illustrative. Real customer data flows live with our first design partner.

Auditor portal — sample export, fake signature.

EU AI Act · Art. 43 · Notified Body export

Auditor Portal

A frozen, read-only manifest of vault state — the artifact a Notified Body or external auditor receives when they ask for the current snapshot. Every row is a dated cross-link into the live vault; the JSON bundle below is the same content packaged as a single signed document.

Snapshot metadata

As of

2026-05-04

Sections

5

Total entries

20

Table of contents

Model registry

Every registered model with current Annex IV revision and status.

idlabeldatednote
mdl-foundation-AFoundation Model A2026-04-22active · Annex IV rev 7
mdl-vertical-BVertical Model B2026-04-29active · Annex IV rev 3
mdl-fine-tune-CFine-Tune Model C2026-05-01active · Annex IV rev 2
mdl-personalization-v7Personalization Assistant v72026-04-15active · Annex IV rev 11
mdl-recommender-v3Recommender v32026-03-30deprecated · pending withdrawal
mdl-text-classifier-v1Text Classifier v12026-02-12withdrawn

Annex IV pack revisions

Latest published Annex IV pack per model. Each pack carries the ledger entries used to compute its sections.

idlabeldatednote
annex-iv-mdl-foundation-A-r7Foundation Model A — rev 72026-04-22—
annex-iv-mdl-vertical-B-r3Vertical Model B — rev 32026-04-29—
annex-iv-mdl-fine-tune-C-r2Fine-Tune Model C — rev 22026-05-01—

DSAR chain-of-custody

Every Article-15 trace request resolved against the ledger.

idlabeldatednote
dsar-4192813Subject 41928132026-04-22trace complete · 1 residual flagged
dsar-7728034Subject 77280342026-04-26trace complete · 0 residuals
dsar-9981255Subject 99812552026-04-30trace complete · pending re-run

Erasure-completeness requests

Every Article-17 erasure request and the proof-or-counterexample certificate. Verifier currently stubbed (P7 substrate gap).

idlabeldatednote
req-2026-001req-2026-001 — subject 4192813 · personalization-v72026-04-23verifier stub · awaiting P7 substrate
req-2026-002req-2026-002 — subject 7728034 · recommender-v32026-04-27verifier stub
req-2026-003req-2026-003 — subject 9981255 · text-classifier-v12026-05-01verifier stub
req-2026-004req-2026-004 — subject 4192813 · fine-tune-C2026-05-03verifier stub

Incident replay ledger

Public-record incidents replayed against the vault. Each entry names the contract that would have refuted at compile time.

idlabeldatednote
inc-air-canadaAir Canada chatbot misinformation (TT8)2022-11 — at chatbot deploy time, before Mr. Moffatt's first interactioncross: /ai/incidents/air-canada-chatbot-2024
inc-nyt-openaiNew York Times v. OpenAI & Microsoft (TT6+T8)2022 — at training-pipeline-compile time, before GPT-4's December 2022 ingestion runcross: /ai/incidents/nyt-v-openai-2023
inc-italian-dpa-replikaReplika — Italian DPA enforcement (TT6+T7)2022-09 — at fine-tune corpus assembly timecross: /ai/incidents/replika-italian-dpa-2023
inc-samsung-leakSamsung internal-data leak via ChatGPT (TT6)2023-03 — at DLP-rule-deploy time, when ChatGPT use was first permittedcross: /ai/incidents/samsung-chatgpt-leak-2023

Signed by

-----BEGIN COSIGN SIGNATURE (ILLUSTRATIVE)-----
issuer:         veric.dev / compliance-vault
algorithm:      fake-sigstore-cosign-stub
certificate:    MOCK fixture — replace at first DP signing
digest:         sha256:0000…0000
signed_at:      2026-05-04T00:00:00Z
rekor_log_idx:  -1
-----END COSIGN SIGNATURE (ILLUSTRATIVE)-----

The signature block above is illustrative — a visual stand-in for the cosign / Sigstore signature a production export will carry. No private key is involved; nothing here is verifiable. Real signing lands when the first design partner signs (BE7 in the implementation plan).

Cross-references