See what an auditor receives
Download a sample pack for an invoice that a supplier-invoice agent sent to review: the decision record, the redaction report, and the integrity proof.
Business control plane for AI agents
Agents know the work. VeriProof knows your business.
VeriProof checks what your agents and automated workflows do against your rules, so people only see the exceptions they have authority to decide. Compliance evidence builds as decisions happen, and auditors can verify each record quickly and independently.
Talk to us about an enterprise rolloutCheck a sample record yourselfSecurity and trust
Decision recordBankingrec_8f3a2c · 14:02:07 UTC
Release a $250,000 wire to a new payeeProposed by a treasury agent · policy
wire-release v12- Escalate
Rule check
Wires above $100,000 to a payee added this month need a person with authority.
- Decided
Reviewer
D. Reyes, Treasury operations · approved after payee verification.
- Reported
Application
Wire released by the payment system. Confirmation reference recorded.
- Verified
Record
Sealed · fingerprint
3c9e…b71f· a reviewer outside your team can check it.
Example record · policy outcome, application response, and evidence together
What happens as the fleet grows
Governing agents by hand stops scaling long before the fleet does
Every agent brings rules to keep, exceptions to decide, and audit questions to answer, and each tool it's built with handles them differently. Run that through email and meetings, and the work lands on the same few people.
Workload shown for every two people on your governance team. The mark on each bar is every hour they have.
1 agentHeroics
It works because people make it work
A developer builds the approval step, and one question from audit costs days in the logs.
Team hours used
5 agentsFriction
Every kind of agent brings its own controls
Agents written in code, built in Copilot Studio, or run through a browser each keep their own approvals and logs.
Team hours used
12 agentsBottleneck
The same few people carry every agent
New agents wait in the approval queue while the team works across twelve setups.
Team hours used
20+ agentsUnsustainable
Growth now means hiring, or pausing
Each new agent adds headcount instead of capacity, and some get pulled back.
Team hours used
20+ agentsWith VeriProof
Every agent governed centrally, however it was built
Agents written in code, built in Copilot Studio, or working through a browser each get rules that fit their work. You manage those rules centrally, along with compliance mapping, human review, and the evidence record.
VeriProof also routes the work between people: a rule change waiting for approval, an exception for the person with authority, a control gap for its owner. Agents reach production sooner and cost less to govern once they're live.
Governed by hand, every two people on a governance team run out of hours at about 12 agents. With VeriProof, the same two can support about 35.
Team hours at 20+ agents
Estimated with the business value calculator.
Evidence that holds up
Records your auditors can verify independently
Answering an auditor or a regulator usually means weeks of pulling logs, screenshots, and emails together. VeriProof seals each decision as it happens, and anyone you share the record with can confirm nothing was changed, removed, or added.
veriproof-sample-evidence-pack.zip
chronology.pdfA readable timeline of the decisionsessions/, revisions/The decision record and its committed revisionreview-records/Who approved it, and the signed go-aheadredaction-report.jsonWhat was withheld, and whyintegrity-proof.jsonFingerprints, signature, and ledger referencesmanifest.jsonWhat the package covers and who asked for itREADME.txtHow to check it yourself
Anyone you share it with can check it
- The signature matches the key you trust
- Every file matches the signed list
- Each fingerprint matches its ledger entry
Download the sample
Proof that stands on its own
The recipient checks the files and signature with a public key. A changed, missing, or extra file fails the check.
Share only what you must
Every pack carries a redaction report that shows what was withheld and why, so sensitive data stays protected while the record stays complete.
Ready before anyone asks
The record builds as your agents work, so answering an audit or discovery request starts with an export.
What every agent gets
The same four jobs, done for every agent
1Enforce
Rules fitted to each application
Each agent's actions are checked against the rules for its application before they run.
Review policy decisions2Coordinate
An owner for every exception
When the rules can't settle a case, a human-in-the-loop review goes to whoever holds the authority, with a deadline.
See the roles and handoffs3Comply
Coverage for your frameworks
Compliance sees which EU AI Act, ISO/IEC 42001, NIST AI RMF, and other controls your agents' decisions cover, and every gap gets an owner.
See how rules map to each framework4Prove
Records auditors check themselves
Every decision record is sealed, so an auditor can check it independently.
See an evidence pack
Already have a gateway, guardrails, or a GRC platform? VeriProof works alongside them and adds the business-rule decision, the human review, and the record. See how VeriProof compares.
In their words
Perspectives on VeriProof
Works with what you run
Connects to your agents and your teams' tools
Your agents
Developers add a ready-made adapter for their agent framework, or the VeriProof developer kit in one of six languages. Agents built in Copilot Studio, or working through MCP or a browser, connect too. VeriProof applies your rules to each one and keeps one decision record for all of them.
See supported agentsYour teams' tools
Reviewers decide from the chat and ticketing tools they already use. Compliance files evidence in your GRC platform, and security analysts investigate in the tools they monitor every day. Your team keeps up as the fleet grows, without another system to watch.
Browse integrationsCoordination, role by role
A portal for every role, with the handoffs built in
Business owners, compliance officers, governance engineers, developers, auditors, and administrators each get a portal for their part. When work needs a person, VeriProof sends it to whoever holds that responsibility. The context goes with it, and the answer comes back.
Screens from the VeriProof portal, shown with sample data.
An agent action needs a person
Reviewer with authority
A rule needs data the agent does not send
Developer
A governance engineer changes a rule for a production agent
Administrator or Compliance Officer
A control is not met
Assigned owner
A risk needs a business decision
Business Owner
An audit begins
Auditor
Common questions
What teams ask before they start
Keep both. A gateway controls traffic, and your GRC platform tracks controls. VeriProof checks each business action against your rules, sends exceptions to someone with authority to decide, and records what the application reported. That evidence then goes to your GRC platform through supported exports and integrations. See how VeriProof works with your GRC platform.
Keep them for what they do well. Agent 365 manages your agents' identities and access, and AI Control Tower tracks your AI inventory. VeriProof decides whether each business action follows your rules, routes exceptions to the person with authority, and keeps records your auditors can verify independently. The same rules cover agents on any framework or platform, and VeriProof already sends reviews and evidence to ServiceNow.
In our model, every two people on a governance team can support about 35 agents with VeriProof, against about 12 by hand. Compliance stops rebuilding evidence for every audit, each agent's decisions already map to the controls they cover, and auditors get records they can check themselves. If you run Vanta, ComplyAssistant, or ServiceNow, the evidence reports you approve go straight into it. Estimate it for your fleet.
No. VeriProof governs the agents you connect, and each one is registered with its own application key, so every decision is tied to a known agent. Keep your discovery tool, Microsoft Agent 365, or ServiceNow AI Control Tower for the inventory. VeriProof adds the business rules, the human review, and the record.
People sign in through Microsoft Entra ID or Okta, and SCIM keeps their accounts and roles in step with your directory. Each agent connects with its own key, and every record shows which agent acted and who decided.
Add VeriProof's developer kit, a framework adapter, or a supported integration, so your application acts on each decision and reports what happened. Developers can start with the SDK quickstart and see which languages and frameworks are supported. They can also create a free Developer account themselves, with no sales call, and invite the rest of the team. See what Developer includes.
The action doesn't run. It waits for an approval, so a timeout or an outage releases nothing. Your application decides whether to retry or hand the work to a person.
Plans are priced by how many agents you run, and the plan prices are published. See pricing.
Start with one agent
Evaluate VeriProof free with your team
Developer includes all enterprise software features for 60 days, with unlimited users and agents. Start without payment details or a sales call.
Step 1
Connect an agent
Start with an SDK and test data
Step 2
Write and test your rules
Watch the results before you enforce them
Step 3
Try human review
Route exceptions to authorized reviewers
Step 4
Review the evidence
Use the results to assess product fit
Start with Developer
Invite your team, connect an agent, and test policy checks and human review. Your plan includes 1,000 recorded decisions per month and 14-day retention.
Start free for 60 daysWhen your team is ready
Choose a production plan for live agents, higher decision volumes, and longer retention. Your configuration and any records still within retention carry over.
Compare production plans