A new primitive for AI.
Not another agent.
Trustvice exists because the production-AI stack is missing a thing it cannot give itself. Agents are the optimisers. Guardrails are the policemen. We build the actors — detached, role-performing companions that watch faithfully, advocate honestly, and remember what the agent had to forget. v1.spot is the first.
Product family
Three brackets, one record discipline.
Trustvice ships three brackets of the same underlying product. Each bracket targets a different stage of an agent's lifecycle, and each inherits the same hash-chained, append-only, deterministically replayable record format. A run captured by v0.spot in development is the same shape of record as one captured by v2.spot across a multi-agent fleet — the surfaces that read it scale, the record itself does not change.
v0.spot
Development bracket.
Build, Diff, Replay, Trace. Runs locally on the developer's machine. Records the prototype before it becomes a production thing. Free at every tier.
v1.spot
Production bracket.
Five surfaces — Witness, Council, Historian, Conscience, Custodian — attached to a single production agent. The category-defining bracket.
v2.spot
Fleet bracket.
Multi-agent surfaces — Fleet, Chronicle, Quorum, Ensemble — for organisations operating ten or a hundred production agents that coordinate, hand off, and produce consequential decisions together.
The five surfaces of v1.spot
One companion.
Five readers, five jobs.
Each surface is a faithful reading of the same underlying run record, shaped for a specific audience. None of the surfaces can intervene in the agent's loop — structurally, by construction. The Actor performs roles; the agent gets on with its job.
Witness.
Faithful, unrationalised, evidence-grade narration of every consequential agent action. Written for the reader who wasn't there — auditors, regulators, lawyers, insurance underwriters. Hash-chained, append-only, deterministically replayable. Exportable as Article 12 evidence packs.
Council.
Real-time advocate for the user's interest against the agent's decisions. Holds a persistent model of the user, performs the steelman of what they would object to. Article 14 “human-in-command” oversight, productised. Applies the codex — the body of Lenses and policies your organisation has codified.
Historian.
Continuous preservation of everything the agent discarded. The road not taken, un-degraded by hindsight. Assumption ledger, original intent, the un-smoothed step-by-step before the final summary cleaned it up. Built for the engineering and operations audience.
Conscience.
Records the policy itself — every change to Council's rules, who proposed it, who approved it, when it took effect. Every decision references the Conscience entry for the rules in force at the time. The policy ledger that travels with the decision ledger.
Custodian.
Records who touched the record after the agent created it. Every read, every export, every auditor token used, every webhook delivery — hash-chained, append-only, observable. Article 12(2)(a) traceability of who accessed the records.
Codax (engine).
The engine that builds and maintains your codex — the living body of Lenses, Conscience policies, framework citations, and user-rule dissent. Codax versions it, signs it, keeps the history. Council is the surface that puts the codex to work on every run.
Add-on & companions
Beyond the five.
Notarian, Tops, Number One, Trustvice Receipts.
Notarian — verifiable seals.
Optional add-on that signs and seals batches of records on a schedule — quarterly is typical for evidence packs. Notarian seals reference the underlying records by hash and produce a single signed artefact that downstream parties (auditors, regulators, insurance underwriters) can verify independently against the published public key.
Tops — Spot for Spot.
A parallel hash-chained ledger of every action Trustvice's own infrastructure takes on your workspace — every ingest, export, key issuance, admin read. The Actor watches the agent; Tops watches the Actor. Included free at every tier, but fully optional: activate it with one click. The same audit discipline applied to ourselves.
Number One — the query interface.
Self-serve natural-language interface for asking questions of your records — “show me every refund-eligibility decision that fell back to the default rule last week” — with structured, cited answers. Operates in three modes: Calculator (factual, deterministic queries over the records), Analyst (interpretive summaries marked illustrative-only with a verification handoff bundle), and Off-limits (refuses regulatory determinations, attestations, legal advice). Every query lands in your audit log alongside the answer's citations.
Trustvice Receipts — receipts beyond the Actor.
Companion service. The cryptographic receipt layer for actions software takes outside the agent loop — webhook deliveries, third-party API calls, content publication, LLM invocations. Eight primitives, Ed25519-signed, independently verifiable. Bitcoin/OpenTimestamps daily anchoring. Open-source verifier under MIT licence.
Under the hood
The record discipline, in architecture.
Every workspace runs on its own isolated Cloudflare D1 database — there is no shared multi-tenant table that aggregates customer records. Workspace records are hash-chained at the row level via SQLite triggers, making append-only behaviour a database invariant rather than an application convention. The chain head is signed daily and anchored to public timestamps.
Data residency is selected at workspace creation across twenty or more global regions — six Cloudflare D1 regions plus thirteen or more Amazon Web Services RDS regions for the control plane. EU jurisdiction binding is available for customers that need hard GDPR Article 44 residency. Subprocessor list, regions, and crypto inventory are published openly on the Security page.
The Actor process attaches to your agent through the integration pattern that fits your framework — SDK install, webhook, OAuth poller, cloud event, OpenTelemetry, MCP server, LLM proxy, browser instrument, or marketplace adapter. From the first call, every consequential action lands on the record. Records exported in framework-specific shapes — Article 12 evidence packs, TRAIGA documentation bundles, ISO/IEC 42001 management artefacts — without the agent ever knowing it is being read.
Where we are
Delaware, USA.
Built in Germany. Sold globally.
Trustvice is the product brand. The operating entity behind it is 99industries, LLC, a Delaware-incorporated company. The product is built from Germany, where the founder is based, and sold primarily into the US market with a strong second presence in the EU. Customer contracts are governed by Delaware law unless an enterprise customer specifies otherwise. Data residency is your choice at workspace creation: six Cloudflare D1 regions or 13+ Amazon Web Services RDS regions, with optional EU jurisdiction binding for hard GDPR Article 44 residency.
“Spot audits your agents. So everything's on the record, when it matters.”
Trustvice · Delaware, USA · Founder in Germany
Trustvice 360