Signal Provenance

Prove any file existed in any state on any date.
To any auditor. Without the enterprise budget.

When a regulator or counterparty asks for proof, you need more than a timestamp. You need evidence that holds up under scrutiny. Until now, that kind of proof required a six-figure contract and a six-month implementation. We made it a desktop app. Two minutes to set up.

You have files you must prove the state of

Contracts. Financial records. Policy documents. Vendor agreements. Compliance filings. When a regulator, auditor, or counterparty asks "prove this file existed in this state on this date," you need an answer that holds up under scrutiny.

Right now, that answer costs $50K-$500K+ per year, or it's a shrug that puts your organization at risk. The technology you need has always existed. It's just never been accessible.

Every obstacle, solved

Obstacle

"We can't prove what version of a file existed on a given date"

SHA-256 hash chain from creation to present. Every file change is witnessed with cryptographic certainty. When an auditor asks for proof, you hand them a chain of evidence, not a promise.

Obstacle

"Enterprise systems cost $500K+"

$10,000 per year. Desktop app. Two minutes to set up. No infrastructure, no consultants, no 6-month implementation. Verifying before your next meeting ends.

Obstacle

"Our files live in the cloud"

Good. Provenance works wherever your files live: SharePoint, Google Drive, S3, local NAS. Your proof travels with the files, not the platform. Switch vendors, move folders, migrate storage. The evidence stays intact. The auditor verifies the math, not your word.

Obstacle

"We need reports that satisfy multiple frameworks"

One export command generates PDF and JSON compliance reports mapped to FDA Part 11, SOX 404, CMMC/NIST 800-171, ISO 27001, HIPAA, and EU AI Act. Hand the PDF to your auditor.

The math

A failed audit delays a deal. A compliance gap holds up a contract renewal. A missing record turns a routine review into a six-figure problem. The direct costs are bad. The indirect costs compound from there: lost contracts, delayed approvals, regulatory scrutiny.

$10,000 a year to make that impossible.

What you're buying

Not software. Proof.

Always-on file tracking

Point it at a folder. Every file change is recorded and chained to the one before it. The record builds itself. You don't maintain it.

Full file history

Did this contract change after March 15? The record knows. Every version, every change, every date. Not just what the file looks like now, but what it looked like at every point in time.

Audit-ready reports

One click produces a PDF or JSON report your auditor can verify independently. Six regulatory frameworks. The report proves itself. The auditor does not need to trust you.

Already running in production

We run our entire company on Signal Provenance. The first external deployment, a chemical distribution company with 1,538 customers and 17,679 interactions, passed chain verification on day one.

This is not a prototype. It is the system we trust with our own records.

Your chain is yours. Forever.

Everything runs on your machine. SQLite databases you own. No cloud dependency, no API calls, no data leaving your network. If your license expires, your chain stays intact. Harvesting, verification, history, and your live dashboard keep working on the free tier indefinitely. We never hold your data hostage.

EU AI Act, August 2, 2026 deadline

Five articles. One tool.

The EU AI Act mandates record-keeping, data provenance, and technical documentation for high-risk AI systems. Legacy compliance vendors cannot retrofit for this because they weren't built with file-level provenance in mind. Signal Provenance covers five articles out of the box.

Art. 12: Record-keeping

Automatic logging of events throughout AI system lifecycle

Annex IV Sec. 2: Data provenance

Training data origin, collection, and preparation documentation

Art. 11: Technical documentation

Demonstrable audit trail for all system components

Art. 17(1)(f): QMS data management

Quality management system data integrity controls

Art. 9: Risk management

Tamper-evident change tracking across the AI system lifecycle

Where this fits

Approach Annual Cost Hash-Chained Tamper-evident Compliance Export
Enterprise DMS (OpenText, M-Files) $50K-$500K+ No No Yes
Compliance automation (Vanta, Drata) $10K-$80K No No Yes
File integrity monitoring (Tripwire, OSSEC) $0-$30K No Yes No
Version control (Git) Free-$50K Partial Yes No
Nothing (the shrug) $0 No N/A No
Signal Provenance $10,000/yr Yes Yes Yes

Based on published pricing and documented feature sets. Pricing reflects typical mid-market ranges.

Six frameworks. One tool.

FDA 21 CFR Part 11

11.10(e), 11.10(b): Audit trails for electronic records

SOX Section 404

Record integrity, 7-year retention

CMMC / NIST 800-171

AU-2, AU-3, AU-6, AU-9, AU-12

ISO 27001 / SOC 2

A.8.15, A.5.33

HIPAA / HITECH

164.312(b), 164.312(c)

EU AI Act

Art. 12, Annex IV Sec. 2, Art. 11, Art. 17(1)(f), Art. 9

The guarantee

If your organization is fined under the EU AI Act for a provenance failure that Signal Provenance was configured to track, we refund your entire subscription.

We can make this guarantee because the system does not depend on our word. Every record references the one before it. Your auditor checks the chain. It either holds or it doesn't.

We deploy it with you.

Signal Provenance is deployed white-glove. We configure it on your hardware, point it at your folders, and verify the chain is running before we leave. You are verifying the same day.

Schedule your deployment

macOS, Linux, Windows. Your data stays on your machine. The chain is yours.

$10,000 / year

Running before your next meeting ends.

What you get:

  • Continuous file verification across local folders, Google Drive, SharePoint, S3
  • Verifying immediately after a two minute setup
  • Six regulatory frameworks, one click compliance report
  • Auditor-verifiable proof your auditor can confirm independently
  • macOS, Linux, and Windows

Works wherever your files live. The verification history is yours forever.

Full guarantee.

First year bundle: $15,000 includes onboarding sprint, renews at $10,000. Contact us for the onboarding package.

Need more than tracking?

Signal Provenance proves what happened. Signal shows you what it means. Classification, enrichment, gap analysis, dashboards. Full operational intelligence built on the same provenance foundation.

Provenance $10K/yr Signal Audit $25K Signal Build $50K Operate $7.5K/mo