sha3:cbf599890df7f785e51b70e504388048339d3af0fd139bcbfc4a58935d55df10Intact0fc30583a81c7633954b81a7bca012f7014a3fc3e69483c8afa16a4b61be9024prev:a32090232926An evidence locker for systems that act without you.
PolicyCortex records what your cloud was, what changed it, and what your machines were allowed to do. Inside your tenant. Hash chained. Gaps declared, not hidden.
Chain headsha3:0fc30583a81cintact
sha3:2d3ca00b2964sha3:fa6d1aa66e92sha3:0dc7038ed6dehead sha3:0dc7038ed6deChain intact6f9a7308aaf8d8630c766716ad5988914a90f4856761ab994a783fcabd7561a6prev:0fc30583a81cThree things you will be asked to prove.
Proof of state
What was true in your environment, as of a date somebody else picks. Not what is true now. Not a dashboard. A record of a moment, assembled from the environment itself, that a second person can check without your help.
Read the layerPROOF 02 / CHANGEProof of change
Who or what changed it, under what authority, and whether the record of that change can be edited after the fact. Most organizations can answer the first part. Almost none can answer the third.
Read the layerPROOF 03 / AGENCYProof of agency
What the machine was permitted to do, what it actually did, and what would have stopped it. When an agent acts at two in the morning, the log line saying it happened is not the answer to the question you will be asked.
Read the layer
Exhibit H-1 · the assessor-ready package all three proofs ship in: inventory, validations, POA&M, SSP, SAR. One ZIP, hash chained, AES-256 protected. Illustrative demo data; the interface is real.
9075a62557bac05860b2d09c60fc045eb08538042d32aa5ade65e9077c5b7845prev:6f9a7308aaf8Five questions the evidence must answer.
- Q-01
Your assessor asks for the configuration as of a date three months back. Can you produce it, or can you only produce today?
Your answerGap declared · no answer on file
- Q-02
An agent took an action overnight. Can you show the policy decision that permitted it, or only the record that it happened?
Your answerGap declared · no answer on file
- Q-03
Your collector was down for six hours. Does your evidence say so, or does it just have fewer rows?
Your answerGap declared · no answer on file
- Q-04
Someone with administrator rights can edit your audit table. What in your architecture makes that detectable?
Your answerGap declared · no answer on file
- Q-05
You are asked whether an AI system in your environment is in scope. Who answers, and from what data?
Your answerGap declared · no answer on file
0dc7038ed6dec27c629ab9f3e5345bec63335adf3498449f3cc6bacfa40d1c2dprev:9075a62557baIt runs where your data already is.
PolicyCortex evaluates policy, collects evidence and gates autonomous action inside your tenant. Nothing about your environment leaves it for us to work. There is no telemetry pipeline pointed at our servers, because a company whose product is proof should not be asking you to trust an outbound connection.
Live readout: policy, evidence, and gating stay inside the wall. Illustrative records; the shape is real.
cbf599890df7f785e51b70e504388048339d3af0fd139bcbfc4a58935d55df10prev:0dc7038ed6deWe are not for everyone.
If you need a checklist and a score, there are good products for that and we will point you at them. If you are accountable for what an autonomous system does in a regulated environment, and you have already worked out that logs and evidence are different words, request verification access.