Every event you send.
Chained as evidence.

Siglato records the activity your AI applications and agents send through its HTTP API or Python SDK, chains it in a tamper-evident audit trail, and turns it into EU AI Act and GDPR-supporting evidence. Self-hosted, no vendor access.

One governance loop.
From register to report.

01

AI-system register

One record per system: purpose, owner, provider, version, legal role and reasoned applicability, with prohibited-practice screening.

Siglato/AI systemsv2.4

Customer service assistant

02

Activity and signals

Events arrive through the HTTP API or Python SDK. PII signals and fixed monitoring policies run on each one.

Siglato/Activity1,140

03

Human review

Named people own oversight. Findings that need judgement go to a review queue; decisions and rationale are recorded.

Siglato/Review queueFND-0042

Decision without the required human approval

High

CustomerRefund me to [REDACTED:IBAN]

AssistantDone: €189.00 refunded.

Take the case
Record decision

04

Incidents and corrective actions

Promote a finding to an incident, assign corrective actions with owners and due dates, record notification decisions.

Siglato/IncidentsOpen

INC-007Refund decided without an advisor

Corrective action

Notify an authority?

05

Article 50 transparency

Record where AI disclosures and content marking exist, who approved them and which version is live. Siglato does not insert notices.

Siglato/Transparency · Article 50

Applicability

Applies: the assistant talks with customers

reason recorded by Claire M.

Disclosure

“You are chatting with an automated assistant.”

WhereChat window · first messageOwnerClaire M.Versionv2 · replaced

06

Evidence reports

JSON, HTML and PDF, in French or English, traceable to source events, with known gaps stated.

Siglato/EvidenceGenerate the pack
Siglatoen

Evidence pack

Customer service assistant · Last 30 days

01System and register

02Observed activity

03Human decisions

04Incidents and actions

05Requirements: evidence and gaps

06Known limitations

Siglato records what it receives. It cannot prove that every AI interaction was sent to it, and it does not certify compliance or replace legal advice. Documentation is delivered with the evaluation bundle.

From request to evidence,
on your own infrastructure.

Request access. After a short qualification, you receive a private Docker Compose bundle and evaluate Siglato for 30 days on one AI system.

Docker Compose

Single-tenant deployment

30-day evaluation

On request, in France

Self-hosted

Your infrastructure

Fits into your infrastructure.
Runs on your servers — no vendor access required.

your infrastructure

Your AI application

Illustration

$ mortgage-approval → llm_call

Siglato

ReceiveEvents via API or SDK
ChainSHA-256 hash chain
ReportTamper-evident evidence

Evidence export

{
"id": "0014",
"framework": "EU AI Act · Art. 14",
"action": "llm_call",
"policy": "14/14",
"pii_found": 2,
"hash": "a3f8b2c1d4e5f6a7b8c9"
}

JSON · HTML · PDF

Self-hosted

No cloud, no vendor access

Integrity check

Chain verified on your infrastructure

EU AI Act · GDPR

Evidence support, not certification

Integration

HTTP API · Python SDK

See it on your own systems.

Early access, on request, for companies established in France. A self-directed 30-day evaluation.