EPI creates a tamper-evident case file for every consequential AI decision — cryptographically signed, portable, and independently verifiable. When a regulator, auditor, or court asks "show us the record," you answer in 30 seconds.
Open-source core · No vendor lock-in · Works with OpenAI, Anthropic, any LLM
The problem
The EU AI Act, CFPB guidance, and FCA rules require documented evidence of AI decisions affecting people. Logs in a vendor dashboard don't count.
LLM call in one tool. Business logic in another. Human review in a third. When regulators ask, engineers spend weeks reconstructing what happened.
Even if you find the logs, you can't prove they weren't altered. Screenshots and exports are inadmissible. You need cryptographic proof of integrity.
How it works
Point your existing AI SDK at the EPI gateway. Every LLM call, tool invocation, and decision is captured automatically — zero code changes.
OPENAI_BASE_URL=http://localhost:8787/v1
python my_agent.py
EPI packages the full decision trail into a portable .epi artifact — a signed, append-only case file containing every step, prompt, response, and human review.
epi gateway export --case-id loan-4821
→ loan-4821.epi (signed, 6 files verified)
Anyone — a regulator, auditor, or opposing counsel — can verify the artifact hasn't been tampered with. No EPI account required.
epi verify loan-4821.epi
→ VERIFIED ✓ Trust Level: HIGH
→ Ed25519 · 6 files · SHA-256
Case study
Acme Fintech uses an AI model to assist loan officers with approval decisions. In Q1, it processed 12,400 applications. The CFPB received 340 complaints from denied applicants alleging discriminatory scoring. The regulator sent a formal request:
"Provide the complete input data, model output, and decision rationale for each denied application, along with evidence that records have not been altered since the time of decision."
epi gateway export-all --status resolved.epi artifacts produced — each containing the exact prompt, model output, policy applied, and reviewer decisionepi verify on all 340 files. Each prints VERIFIED ✓ Trust Level: HIGHWhat EPI captures
Every LLM prompt and response, tool call and result, agent step, and business logic outcome — in order, timestamped.
The artifact is cryptographically signed at creation. Any modification — even a single byte — invalidates the signature.
Who reviewed the decision, what they decided, when, and why — embedded in the same signed artifact.
Which epi_policy.json was in effect at the time of the decision, and whether the AI's behaviour complied.
OpenAI, Anthropic, Google, Mistral, or any OpenAI-compatible API. Zero code changes — just point your SDK at the EPI gateway.
A .epi file is a self-contained ZIP. No EPI account needed to verify it — today, or in 10 years.
Pricing
All plans include the open-source core. No credit card required to start.
epi verify CLI.epi exportIn a 20-minute call, we'll walk through a live scenario — your industry, your AI stack — and show you exactly what your audit response would look like today.
Or email directly: mohdibrahim@epilabs.org