Questions
Questions buyers ask before they trust the record.
Straight answers on certification, privacy, verification, evidence, deployment and purchase.
Who certifies?
You do. The attestation is yours. Regulayer does not certify your filing, decide whether your statement is true, or become a party to the matter. It records the attestation and binds it to the record so that a later alteration can be detected and the record can be independently checked.
Does Regulayer read my document?
No. Regulayer records the evidence needed for the Receipt without sending your underlying work to Regulayer. The material is fingerprinted locally so a later change can be detected.
Does it work with my AI tool?
Regulayer works independently of the AI provider. It does not depend on a particular model vendor to create or verify the Receipt, so the evidence is not tied to one AI system. Because it records what you state rather than what the tool does, it is not built around any single tool.
What does opposing counsel see when they verify?
Your attestation, the signature check, the time and its basis, and whether the sealed document has changed. Never the underlying work itself. They do not need an account or a paid plan to verify.
What if it is challenged?
The verifier checks whether the record still matches what was signed. If the signed material has been altered, verification fails. If it remains intact, the verifier can confirm the cryptographic integrity and the facts carried by the record. What legal weight a court or other recipient gives that record is a separate question.
How does this relate to Federal Rule of Evidence 902(13) and 902(14)?
Federal Rule of Evidence 902 provides self-authentication routes for certain kinds of electronic evidence. Rule 902(13) covers qualifying records generated by an electronic process or system, and Rule 902(14) covers qualifying copied data authenticated through a digital-identification process, subject to the Rule’s certification and notice requirements. Regulayer is designed to create signed, tamper-evident records and independent verification that can support that kind of authentication workflow. It does not make evidence automatically admissible, determine what a court will accept, or replace other requirements such as relevance, hearsay rules, foundation or applicable court procedure.
What if my judge’s order asks for something unusual?
Court orders differ. The Receipt records the AI tool, the declared use and the human attestation so the relevant facts can be carried with the matter. The lawyer remains responsible for matching any filing or certification to the particular court’s rule, standing order and required language.
Who witnesses the time if nothing leaves my machine?
An independent timestamp authority, under RFC 3161. Only a fingerprint of the record is sent, never the work and never a name. Offline, the record still seals and says its time is self-asserted.
What if I lose my laptop?
Records you have already made remain independently verifiable even if the machine is lost, because each record carries what a verifier needs. A replacement installation uses a new signing identity. We never hold your key, so there is no master key on our side.
Where do my records live?
Under your control rather than in a Regulayer account. Regulayer does not maintain a central store of your underlying work or your Receipt records. Each record is independently verifiable by anyone you give it to.
How can Regulayer fit into a 21 CFR Part 11 or EU GMP Annex 11 environment?
Those regimes place controls around electronic records, computerized systems, data integrity and, where applicable, audit trails. Regulayer can provide a signed evidence record around an AI-assisted decision without requiring the underlying work to be stored by Regulayer. Whether and how it is used inside a validated Part 11 or Annex 11 environment depends on the customer’s validated system, procedures and intended use.
How can Regulayer be used where HIPAA applies?
HIPAA requires regulated entities to protect the confidentiality, integrity and availability of electronic protected health information through appropriate administrative, physical and technical safeguards. It does not by itself require all ePHI to remain on local infrastructure. Where Regulayer is deployed in a HIPAA-regulated workflow, the customer remains responsible for its HIPAA obligations, including risk analysis, access controls, business associate agreements where applicable, and the configuration of every system that handles ePHI. Regulayer’s local and customer-controlled deployment options may reduce the need to send underlying work to Regulayer, but that is a deployment property, not a claim that Regulayer makes the workflow HIPAA compliant.
Why monthly rather than once?
Because the obligation recurs. Each new matter, filing or AI-assisted piece of work can create another need to show what was declared, reviewed and signed. The subscription covers making new records; records already created remain independently verifiable.
How do I buy it?
The Receipt is $349 a month, or $449 a month with human presence. Use the purchase link for secure card checkout. For firm deployment or enterprise licensing, write to hello@regulayer.com.
