Trust and integrity
How Atested earns your trust
Use Atested to verify everything it says. It is your chain, signed with your key. Send it to whoever you want and they can audit it independently from you or us. Trust is earned.
Atested is SOURCE-AVAILABLE
We are fully transparent
The classifier, the policy evaluator, the chain recorder are all inspectable. Don't take our word for how it works. Verify for yourself.
YOUR KEY, YOUR CHAIN, YOUR DATA
We can never see your data
Your signing key is generated locally and never leaves that machine. In multi-machine installs, each machine has its own key and the primary stores verified remote imports. Atested cannot see your key or your chain.
INDEPENDENT VERIFICATION
You enable verification
Provide your public key to an authority, auditor, regulator or whoever you choose and they can independently verify your chain. No special Atested software is required, but we provide a source-available verification app to make it easy. The math either checks out or it doesn't.
COMPLETE HISTORY
Every decision. Nothing deleted.
Atested's chain is append-only. Nothing is deleted, nothing is modified. When multi-machine use is configured, the primary also records import envelopes for remote chains, so the unified view can show their verified history without mutating remote records.
Privacy by operation
No usage telemetry
Atested does not send product usage or behavior telemetry to Atested. Your governance decisions and chain remain in your environment.
Website inquiries stay inquiries
The contact form sends the details you choose to share to our business inbox so we can answer you. It is not a mailing-list signup. We do not run visitor analytics or marketing trackers.
Security checks are separate
If enabled, a critical-notice check sends the signed identifiers needed to authenticate an installation and deliver security or license notices. It does not send prompts, model responses, chain contents, paths, or tool arguments.
No marketing channel
Atested does not use product telemetry or contact form submissions to send marketing messages. Read the privacy policy for the full data description.
Export security
Exports are authenticated
Exports from Activity, Audit Search, or Reports are recorded in the local governance chain with the selected machine scope and source view.
Evidence packages are encrypted
Evidence packages created from the Chain Walker use PBKDF2-HMAC-SHA-256 key derivation (310,000 iterations) and AES-256-GCM encryption. The package contains no plaintext chain data. Decryption happens entirely in the recipient's browser using the WebCrypto API — no server, no install, no Atested account.
The viewer verifies integrity
The self-contained evidence viewer checks the ciphertext hash and verifies chain record hash linkage after decryption. It renders evidence in two modes: a plain-language view for non-technical audiences and a technical view with encryption parameters, verification results, and a record-level hash linkage table. The viewer is view-only — there is no decrypted data download function.
No cloud dependency
Evidence packages are ZIP files you share directly. The viewer HTML is inside the ZIP. Recipients open it in their browser. No Atested server is contacted during viewing or verification. The math either checks out or it doesn't.
Start attesting your AI operations
Personal, noncommercial use is free. Contact us about business and organizational licensing.