It never reads your words. And when the question comes, the answer is already sealed.
This is a demonstration, with sample dataThe Witness is built on one refusal: it will not read your words.
What it seals is the shape of the moment: that AI ran, in which tool, at what time, and what a human chose to do about it. Your documents, your client's secrets, your patient's chart, your deal terms, none of it is ever stored or sent. That is why the record can be shown to an outsider without betraying an insider.
And the record cannot be quietly cleaned up. Every entry is sealed to the one before it. Remove one, change one, reorder one, and the seam shows, to anyone, with the free checker.
The part nobody else has.
A human decides, and the decision itself is sealed.
Plenty of tools log AI. The Witness records something rarer: the moment a person looked at what the AI did and chose, keep or remove. That judgment, the who and the when of it, becomes its own sealed record. When someone later asks "was a human in charge?", the answer is not a policy document. It is a signed moment.
And it happens at the moment, beside the work, because the very next message builds on this one. A conversation cannot be un-had, and a decision cannot be un-built-upon. A record reviewed later is archaeology. The Witness seals it when it happens, because later is too late.
The Witness grew up in law, where the questions arrived first. The questions are the same everywhere: what did the AI do, who was in charge, and can you prove it without showing me everything else?
What one sealed memory does for a company.
The dispute is the rare case. Most of what the Witness does is quieter, and worth money every week.
The money
The defense
The oversight
The continuity
Vehicles and robotics, trading desks, medical devices, defense, research integrity, the public sector: the same record, a different label per sector. Law is the beachhead, not the boundary.
Why this and not a log file.
Five things at once. That is the difference.
Said plainly.
What the Witness does not do.
It starts on the day it is installed: it cannot witness the past. It records conduct, it does not judge quality. It is tamper-evident, not tamper-proof: nothing can stop a determined destroyer, but nothing can be quietly altered either, the seam always shows. And it is evidence, not a compliance certificate: it gives you the record, your lawyers and regulators decide what the record satisfies.
The questions people ask first.
No. It stores fingerprints of moments, never content. Your documents and messages never leave your machines and are never held in the record.
Any change shows. Each moment is sealed to the one before it, so removing, altering, or reordering leaves a visible seam that the free checker exposes.
A person. The Witness holds the moment, a human chooses keep or remove, and that choice is sealed as its own record. The system never decides silently.
Yes. It records at the point of use, even for closed vendor tools, and where it cannot see, it seals the gap honestly instead of pretending coverage.
No. It is evidence: a sealed, checkable record of conduct. What that evidence satisfies is a decision for your counsel and your regulator, made easier because the record exists.
No. The memory lives on your machines, nothing leaves the building, and the checker works offline. That is the design, not a mode.
The question will come. The answer is already sealed.