Compliance How It Works Pricing Americas ↗ Request Access
European Edition · EBA · DORA · AI Act · GDPR

Cryptographic proof
for every AI decision.

ProvableCORE® delivers tamper-evident governance receipts for European agricultural lenders. EBA GL/2020/06 compliant. AI Act Annex III ready. Every credit event sealed with Merkle proof and KMS signature.

RFC 9162
Merkle Standard
RSA-4096
KMS Signing
7 Years
WORM Retention
80ms
Verify Latency p50
v0.6.0
Production

Governance infrastructure
for institutional AI.

Merkle · RFC 9162

Tamper-Evident Receipts

Every governance event receives a cryptographic Merkle inclusion proof per RFC 9162 Certificate Transparency standard. Independently verifiable by any third party.

GCP KMS · RSA-PSS

Hardware-Grade Signing

RSA-PSS-SHA256 signatures via GCP KMS Hardware Security Module. Private key never leaves the HSM. Full cryptographic audit trail.

WORM · 7 Years

Immutable Audit Journal

Write-once-read-many storage via GCS Bucket Lock. 7-year retention per EU regulatory requirements. Append-only Firestore event journal.

Public · No Auth

Open Verification

Any regulator, auditor, or counterparty can verify a ProvableCORE® receipt without authentication. The verification endpoint is public and permanently available.

SHAP · Explainability

Model Explainability

Every AI credit decision accompanied by SHAP Evidence Cards. Feature attribution, confidence intervals. EBA GL/2020/06 §5.2 compliant.

Replay · Audit

Journal Replay

Full event journal replay from any sequence point. Complete audit trail for regulatory examinations.

Built for European
regulatory standards.

EBA GL/2020/06
Loan Origination Guidelines
Milestone-based credit assessment. Full model explainability on every decision. Human oversight layer maintained throughout.
EU AI Act · Annex III
High-Risk AI System
Classified as high-risk under Annex III. 10 QMS documents: Technical Documentation, Risk Management, Human Oversight, Conformity Assessment.
DORA · 2022/2554
Digital Operational Resilience
Immutable append-only event journal. Cryptographic integrity verification. 7-year WORM retention. Full ICT incident audit capability.
GDPR · Article 35
Data Protection Impact Assessment
Full DPIA completed April 2026. EU data residency (GCP europe-west1). MSign KES qualified electronic signature.
RFC 9162
Certificate Transparency
Merkle tree per IETF RFC 9162. SHA-256 hashing. Inclusion proofs verifiable by any third party without access to full journal.
EUDR · 2023/1115
Supply Chain Traceability
GPS origin tracking for agricultural commodities. Full chain of custody. Grain Passport with EUDR compliance.

From credit event
to tamper-evident proof.

01
Event Recorded
Credit decision recorded in append-only Firestore journal. Full metadata, actor ID, timestamp, correlation ID.
02
Merkle Sealed
RFC 9162 inclusion proof generated. Root hash updated. Audit path preserved for independent verification.
03
KMS Signed
RSA-PSS-SHA256 via GCP KMS europe-west1. Hardware security module. Key never exported.
04
WORM Archived
GCS Bucket Lock. 7-year retention per EU regulatory requirements. Auditor and regulator accessible.

Any party can verify.
No authentication required.

EU Verification Endpoint · Public · No Auth Required
POST https://provablecore.eu/governance/verify Content-Type: application/json { "jws_signature": "eyJhbGciOiJIUzI1NiJ9...", "event_id": "6d0962ed-970f-42f9-9447-b88d1498228f" } → {"valid": true, "reason": "signature valid", "verifier_version": "acs-governance-runtime/v1"}

Start free.
Scale when ready.

14-day full-access trial. No credit card required. Cancel anytime.

Trial
€0/14 days
Full platform access. Evaluate ProvableCORE® with your own credit events before committing.
  • Up to 100 governance receipts
  • All 6 API endpoints
  • Merkle proofs + KMS signing
  • WORM storage included
  • Public verify endpoint
  • Email support
Start Free Trial
Enterprise
€3,490/month
For banking groups and institutions requiring unlimited scale and dedicated support.
  • Unlimited receipts
  • Dedicated onboarding
  • Custom API integration
  • SLA 99.9% uptime
  • 24/7 support
  • Custom contract + DPA
  • On-site compliance review
  • Multi-jurisdiction coverage
Contact Sales

All plans include: Merkle RFC 9162 · GCP KMS RSA-4096 · WORM 7-year retention · Public verify endpoint · EU data residency

Ready for EU regulatory-grade
AI governance?

Request a pilot for your European agricultural lending portfolio.

Request EU Pilot ACS EU Platform