When your records are challenged, prove they haven't changed.
Tallwright witnesses what your agents do, the moment it happens. Months later, when a customer, an auditor or an investigator doubts your records, you show that nothing was altered since, without asking anyone to trust your logs.
Your first three Environments are free. No card to start. No per-record pricing, and evidence creation never stops because of a billing limit.
Captured · Committed · Sealed · Witnessed. Content stayed in your system.
Nothing on either side can touch the witnessed state during this time. Not you, not us. Any edit to the records would fail the check below.
“I never authorized this. The AI agent did it on its own.”
These records match the state witnessed on 14 Aug 2026 · 10:36:12. Unchanged across the whole interval.
Request and approval precede the agent action. All three were witnessed four days before the claim.
Witnessed by Tallwright · Verifiable by the other side without relying on your logs · Says nothing about who is right, only that the records are what they were
Your logs can be right — and still fail you when they're challenged.
You recorded it, you stored it, you present it. Whoever challenges you knows that. So the first question is never what your logs say. It is whether they were edited on the way, and more logs cannot answer it.
- Action
- refund.approved
- Amount
- €240.00
- Order
- 88231
- Agent
- support-agent-7
Recorded by you. Stored by you. Presented by you.
Correct, and unprovable. The person reading it has only your word that it looked like this on 14 August.
- Action
- refund.approved
- Amount
- €240.00
- Order
- 88231
- Agent
- support-agent-7
Still your record. Now with a check the other side runs, against a witness that isn't you.
This is what you hand over. The other side runs it, not you.
The page behind every verification link. No account, no access to your system, no content shown. Change the amount and watch the halves stop meeting.
Who will challenge you, and what you prove to them.
Three people, three reasons. The proof is the same each time.
Disputes an action and wants the money back.
“I never authorized this.” “Your agent promised more.” A chargeback or a complaint, days or weeks after the fact, with the agent as the excuse.
You prove the request, the approval and the action existed in this form before the dispute, and have not changed since.
Wants the full sequence, and doubts it is complete.
An inquiry months after an incident. The quiet assumption is that logs get cleaned up before they are produced.
You prove every witnessed record is the one that existed at the time, and that nothing was rewritten between then and the inquiry.
Decides who carries the loss.
Liability for an agent's action turns on what was recorded when. Records that only you can vouch for carry little weight.
You prove your records are what they were, independently of you. Tallwright says nothing about who is right. That is what makes it usable.
How it works, in human words.
Your agent records. Tallwright witnesses. Your customer verifies.
One call when something consequential happens.
// after the action, in your code await tw.witness({ action: "refund.approved", ref: "order-88231" });
The content stays in your database. Tallwright receives proof of the record, not the record.
Your environment keeps the record. Tallwright keeps the proof.
Change either, and they no longer match. Tallwright's half carries no customer content.
They run the check. You get the benefit.
This record still matches the state witnessed on 14 Aug 2026.
The customer, auditor or investigator runs the check on a public page, without your help, and gets the same answer you did. You don't have to be in the room.
What your security team will ask before you can rely on this.
Evidence you cannot explain to your own security and legal teams is evidence you cannot use. These are the answers, and the other side gets the same page.
Your content stays with you.
Tallwright receives proof of a record, never its content. There is nothing on our side to breach, subpoena or leak that would reveal what your agent did.
Hosted in the EU by default.
Witnessed states are held in Frankfurt. You choose the region before your first record, and it does not change afterwards. Other regions on request.
Verification is open.
The check runs on a public page and follows a published spec. Your customer does not need an account, and does not need to trust us any more than you do.
Documentation for procurement.
Security overview, data processing agreement and subprocessor list are downloadable. [SOC 2 STATUS]. [ISO 27001 STATUS].
Security documentationThat a record is unchanged since Tallwright witnessed it, to anyone, without them needing access to your system or to Tallwright.
That the event happened the way the record describes it, or that every action your agent took was recorded. Tallwright proves integrity of the record, not the truth of the world.
First three Environments free. No per-record pricing. Evidence creation never stops at a billing limit.
PricingBe ready before an agent action is challenged.
The evidence has to exist before the dispute. Records witnessed today defend you next year; records witnessed after the claim defend no one.