A supervisor asks about one decision. You answer from the record.
HONESTAS writes every step of an AI-assisted decision once, as it happens, into one event stream. That stream is rendered for each regime you answer to. When a supervisor asks about one decision, you send its sealed record in minutes, instead of rebuilding it from systems that were never asked to agree.
The obligations are already here. More arrive in 2027.
Each regime asks the same thing in its own words: show how this decision was made, who oversaw it and what it rested on. An answer rebuilt from logs, emails and spreadsheets is slow, and it rarely matches itself.
Sources: Regulation (EU) 2024/1689, as amended by Regulation (EU) 2026/1744 · Regulation (EU) 2022/2554 · Central Bank of Ireland.
One stream, rendered for each rule you answer to.
Each rule is linked to the sealed decisions that answer it, so a supervisor can follow the line from the article to the evidence.
- AI Act record-keepingRegulation (EU) 2024/1689, Article 12Automatic logs over the system's life. Each event is written once, as it happens, and kept outside your installation.
- AI Act human oversightRegulation (EU) 2024/1689, Articles 14 and 26Oversight by people with the competence and authority to act. The record names who oversaw each decision and what they did.
- DORARegulation (EU) 2022/2554ICT risk, incidents and the register of information on ICT providers, drawn from the same stream.
- Solvency IIDirective 2009/138/EC, Article 41An effective system of governance, with decisions documented and open to review.
- Central Bank of IrelandConsumer Protection Code, in force 24 March 2026Fair treatment of consumers, with records that show how each decision about them was reached.
- Lloyd'sPrinciples for doing business at Lloyd'sUnderwriting, claims management, reserving and customer outcomes, evidenced decision by decision.
AI Act dates as amended by Regulation (EU) 2026/1744, the Digital Omnibus, published in the Official Journal on 24 July 2026. Lloyd's claims management principle. Not legal advice. Certification stays between you and your auditor.
Written once. Answered for every regime.
Nothing is re-keyed for a regulator. The record the handler made is the record the supervisor reads.
Written once
Every input, AI seat, check and signature is written into one event stream as it happens. Nothing is copied in later.
Rendered per regime
Each regime gets its own view of the same stream, with each of its articles linked to the records that answer it.
Sealed outside
Each record is sealed with an outside time stamp and kept outside your installation. Change one character and the check fails.
Answered in minutes
Find the decision by claim, policy or date and send a Decision Passport by a link that expires. The supervisor checks it with no account.
The record, the seal and who checked what.
These are HONESTAS screens, shown with sample data from Northgate Mutual, a sample organisation.
One file a supervisor can check
Two sealed claim decisions carried as one file, with the evidence and tables they rest on, who worked it out and what the file does not say.
- Checked by any verifier, with no account
- Sent by a link that expires
- A changed copy reads as contradicted
From the seal to the moment it can leave
Every record is checkpointed, time-stamped outside and countersigned before it may leave as a record file. One still inside its first minute waits.
- Time stamp from outside the firm
- Countersigned by two outside witnesses
- Nothing leaves before its checkpoint
Which answers were checked
A model from another company reviews a sample of the assistant's answers, and anyone can ask for a review of their own. What it found is kept with the answer.
- Held up, held up with notes, or not sampled
- Any answer can be sent for review
- Reviews seen only by those who may see the answer
Measure how fast you can show your work.
These are the measures a chief risk officer or head of compliance tracks, read from the event stream and the sealed records themselves.
- Time to answer
- From a supervisor's question about one decision to sending its sealed record.
- Complete records
- The share of AI-touched decisions whose record holds the inputs, seats, checks and signature.
- Named oversight
- The share of decisions with a named person who could override or stop them.
- Retention
- Logs and records kept for the period each regime requires, and deletions recorded.
- Follow-up requests
- Supervisory questions that needed a second request before they were answered.
- Re-run
- Sealed records reopened and re-run with the same result.
- ICT register
- ICT providers in your DORA register linked to the decisions they touch.
Compliance evidence, in practice.
Does HONESTAS make us compliant?
No product can. HONESTAS keeps the evidence each rule asks for and links it to the rule. Certification and legal opinions stay between you, your auditor and your advisers.
Which regimes can it render?
The AI Act, DORA, Solvency II, the IDD, GDPR, the Central Bank of Ireland's codes, the FCA's rules and Lloyd's principles, with the regimes of each market you work in.
Can a supervisor check a record without access to our systems?
Yes. A Decision Passport is one file, checked by any verifier with no account. You choose who receives the link and when it expires.
How long are records kept?
As long as your retention policy says, set per regime and per kind of record. A deletion is itself recorded, so a gap is never silent.
Go deeper
Bring the question a supervisor asked last year.
We will show you how HONESTAS would have answered it, from the article to the sealed record.