Questions
Questions buyers ask before they trust the record.
Straight answers on certification, privacy, verification, evidence and deployment.
Who certifies?
You do. The attestation is yours. Regulayer™ records the attestation and binds it to the record so that a later alteration can be detected and the record can be independently checked.
Does Regulayer™ read my document?
No. Regulayer™ records the evidence needed for the Receipt without sending your underlying work to Regulayer™. The material is fingerprinted locally so a later change can be detected.
Does it work with my AI tool?
Regulayer™ works independently of the AI provider. It does not depend on a particular model vendor to create or verify the Receipt, so the evidence is not tied to one AI system. Because it records what you state rather than what the tool does, it is not built around any single tool.
What does opposing counsel see when they verify?
Your attestation, the signature check, the time and its basis, and whether the sealed document has changed. Never the underlying work itself. They do not need an account to verify.
What if it is challenged?
The verifier checks whether the record still matches what was signed. If the signed material has been altered, verification fails. If it remains intact, the verifier can confirm the cryptographic integrity and the facts carried by the record. What legal weight a court or other recipient gives that record is a separate question.
How does this relate to Federal Rule of Evidence 902(13) and 902(14)?
Federal Rule of Evidence 902 provides self-authentication routes for certain kinds of electronic evidence. Rule 902(13) covers qualifying records generated by an electronic process or system, and Rule 902(14) covers qualifying copied data authenticated through a digital-identification process, subject to the Rule’s certification and notice requirements. Regulayer™ is designed to create signed, tamper-evident records and independent verification that can support that kind of authentication workflow. It does not make evidence automatically admissible, determine what a court will accept, or replace other requirements such as relevance, hearsay rules, foundation or applicable court procedure.
What if my judge’s order asks for something unusual?
Court orders differ. The Receipt records the AI tool, the declared use and the human attestation so the relevant facts can be carried with the matter. The lawyer remains responsible for matching any filing or certification to the particular court’s rule, standing order and required language.
Who witnesses the time if nothing leaves my machine?
An independent timestamp authority. Only a fingerprint of the record is sent, never the work and never a name. Offline, the record still seals and says its time is self-asserted.
What if I lose my laptop?
Anyone can still verify records you have already made even if the machine is lost, because each record carries what a verifier needs. A replacement installation uses a new signing identity. We never hold your key, so there is no master key on our side.
Where do my records live?
Under your control rather than in a Regulayer™ account. Regulayer™ does not maintain a central store of your underlying work or your Receipt records. Anyone you give a record to can verify it, independently.
How can Regulayer™ fit into a 21 CFR Part 11 or EU GMP Annex 11 environment?
Those regimes place controls around electronic records, computerized systems, data integrity and, where applicable, audit trails. Regulayer™ can provide a signed evidence record around an AI-assisted decision without requiring the underlying work to be stored by Regulayer™. Whether and how it is used inside a validated Part 11 or Annex 11 environment depends on the customer’s validated system, procedures and intended use.
How can Regulayer™ be used where HIPAA applies?
HIPAA requires regulated entities to protect the confidentiality, integrity and availability of electronic protected health information through appropriate administrative, physical and technical safeguards. It does not by itself require all ePHI to remain on local infrastructure. Where Regulayer™ is deployed in a HIPAA-regulated workflow, the customer remains responsible for its HIPAA obligations, including risk analysis, access controls, business associate agreements where applicable, and the configuration of every system that handles ePHI. Regulayer™’s local and customer-controlled deployment options may reduce the need to send underlying work to Regulayer™.
