AI ActHigh-risk AI rules for life and health insurance pricing apply from 2 December 2027.See what to keep
Sign inBook a demo
Sealed records

Reopen any decision. Re-run it exactly.

When a named person signs, HONESTAS seals the whole thread into one record: the decision and its reasons, every argument, both models' answers, the evidence and the exact versions of the rules and models. The time stamp comes from outside. Years later you can reopen the record and re-run it, and get the same answer.

Time stamped from outside AdverantKept outside your installationCheckable by anyone, with no account
honestas · evidence · the seal receiptSample data
The seal receipt: six claim records sealed in 18 minutes, each checkpointed, time-stamped and countersigned, one still waiting for its time stamp
The seal receipt. From the seal to the moment a record may leave, step by step.Sample data
What is sealed

The whole thread. Not a summary of it.

A sealed record holds everything a supervisor, auditor, ombudsman or reinsurer would ask about one decision, in one place, in the order it happened.

  • The decision

    What was decided, the reasons in plain words and the clause each rests on.

  • Who decided

    The chair, the authority she held at the time, and her signature with the phone's own proof.

  • What was argued

    Every seat's argument, the challenger's too, and any seat left empty.

  • What was checked

    Both models' answers, which models and versions, and the agreement rule.

  • What it rested on

    Every piece of evidence with its fingerprint, and what was missing, typed.

  • What it ran against

    The exact versions of the wording, rate tables, rulebook and models.

Sealed record · CERT-9F31Sample
record CERT-9F31 · claim CLM-4471 decided Settle at EUR 44,900 reasons Betterment, clause 7.3, in plain words chaired by Aoife Ryan, head of claims authority Motor claims v3 · within limit argued for · against · challenger, kept checked model A and model B agree, rule v2 evidence 5 items fingerprinted · 1 missing pinned wording v4.2 · claims model 2026.07 signed passkey, own phone · 14:03:41 UTC time stamp outside Adverant · 14:03:44 UTC
Sealed · fingerprint 9f31 c4a8 7d02 a802
The Decision Passport

One file. Anyone can check it.

A Decision Passport carries one or more sealed records as a single file, with the evidence and tables they rest on. You send it by a link. The person who opens it can verify it with any verifier, without an account and without asking you.

  • One file, with every record inside it and its own fingerprint
  • Verified with no account, by any verifier
  • Sent by a link that expires and can be withdrawn
  • Changed by nobody: a changed Passport is a new one, with its own number
  • It says, in its own words, what it does not prove
The certificateSealed recordsThe evidenceRules and versionsAny verifierA Decision Passport drawn as layers: the certificate, the sealed records, the evidence, the rules and versions, and a verifier checking them
honestas · decision evidence · a decision passportSample data
A Decision Passport carrying two sealed claim records, the evidence they rest on, what they pin, what the evidence supports, who worked it out, and what the Passport does not say
A Decision Passport. A payment on account and a settlement carried as one file, with a record link that expires on 19 November. Section 6 lists what it does not say.Sample data
Re-run, years later

Pinned to its versions. Out of date is not wrong.

A record keeps the exact version of everything it used, never "the latest". Reopen it after the wording has changed, and HONESTAS re-runs it on what was in force on the day. You can also read it against the new version, as a question.

  • Every fingerprint matched against the version store
  • What has changed since, shown item by item
  • A re-run is a new record that points back to the first
  • A pin that names no version is refused when it is written
honestas · versions · pinned to its versionsSample data
A sealed coastal binder decision pinned to six items: four still current and two replaced since, with the new room terms compared clause by clause
Pinned to its versions. Six items pinned at the seal, two replaced since. The record does not change.Sample data
Kept outside

Nobody can rewrite it. Not even us.

The record store sits outside your installation, and the time stamp comes from outside Adverant. A record that has been changed simply fails its check.

01

Sealed

At the record store's own clock, never a caller's, the moment the signature covers every item.

02

Checkpointed

Within the second, into a log that both your firm's key and the platform's key sign.

03

Time-stamped

By an outside time-stamping service, within 15 minutes. Until then, no record file can leave.

04

Kept

Outside your installation, for as long as your rules say. You keep a full export in an open format.

The rules it answers to

Records kept the way the rules ask.

  • AI Act Article 12Regulation (EU) 2024/1689, record-keepingHigh-risk AI must log events automatically over its lifetime. From 2 December 2027 for life and health pricing.
  • AI Act Article 19Regulation (EU) 2024/1689, automatically generated logsLogs are kept for a period suited to the purpose, of at least six months.
  • DORARegulation (EU) 2022/2554, applies since 17 January 2025Digital operational resilience for insurers, including records of ICT incidents and of what was done.
  • EIOPA Opinion on AIAI governance and risk management, 6 August 2025Record-keeping and traceability of AI systems, so decisions can be explained afterwards.

AI Act dates as amended by Regulation (EU) 2026/1744, the Digital Omnibus, published in the Official Journal on 24 July 2026. Not legal advice. Certification and legal opinions stay between you and your advisers.

Questions

What people ask.

Where are the records kept?

In a record store outside your installation, in the EU, so that nobody inside it can rewrite them. You keep a full export in an open format, and you can take it with you if you leave.

What does a Decision Passport not prove?

That a decision was right, that anyone was good at their job, that your tables are fair or how often a decision was used. It says so on its face. It proves what was decided, by whom, on what evidence and rules, and that nothing has changed since.

Who can open a Passport?

Anyone you send the link to, until it expires or you withdraw it. They need no account. The part of the link that identifies the record never leaves their phone or browser.

Can a sealed record be corrected?

A sealed record never changes. A correction is a new record that points back to the first, with its own signature and reasons. Both stay.

How long are records kept?

As long as your retention rules say, per line of business, with legal holds. The AI Act asks for logs of at least six months. Claims records are usually kept far longer.

What about personal data in a record?

Records follow your retention and erasure rules. Where a law requires erasure, the personal data is removed and the record keeps a typed note that it was.

Book a demo

Reopen a decision you made last year.

Bring a decision you were asked about after the fact. We will show what its sealed record would have held, and how a re-run answers the question.