AI agent audit trail

Know exactly what your AI agent did

Your agents send emails, trigger payments, and modify data. AgentReceipt captures every action as a tamper-proof receipt. When something goes wrong, you have proof.

The problem

Agents act. Nobody knows what they did.

Today, most AI agent deployments look like this. Actions happen, and nobody can prove what actually ran.

Incident Log · Session #????
Warn01

Agents take real actions

Your AI agents approve expenses, send emails, update records, and trigger payments. These are not suggestions. They are real actions with real consequences.

Miss02

No readable record exists

When something goes wrong, there is no agent action log a non-technical person can read. No receipt you can hand to your compliance team or your customer.

Audit03

Audits need answers

Wrong payment to the wrong vendor. An email sent to the wrong customer. Your audit asks what your AI did last Tuesday. A log of what happened is not enough. You need to know what the agent saw and what rules it was following when it made the call.

End of log · unresolved
How it works

Three steps. Five minutes.

1

Add three lines of code

Install the SDK and wrap your AI client. No config files, no extra infrastructure. Three lines and you have full agent observability, capturing every action automatically.

agent.ts
import { createClient } from "@agentreceipt/sdk";

const ar = createClient({ apiKey: "ar_..." });
const openai = ar.wrapOpenAI(new OpenAI(), { sessionName: "Process invoice #441" });

Works with OpenAI, Anthropic, Gemini, Mistral, and the Vercel AI SDK.

2

Your agent runs as usual

Every LLM call, tool call, and decision is captured automatically as an LLM audit log. Your agent code does not change. If the SDK cannot reach our servers, it fails silently. Your agent keeps running.

Session #A7F3 · capturing
14:02:14llm.call
ok
14:02:17tool.call
ok
14:02:19tool.call
writing
3

View the receipt

Open the dashboard and see a human-readable timeline of everything your agent did. Each receipt shows the full decision context: the rules, permissions, and state your agent was operating under when it acted. Every event is hash-chained for tamper-proof verification. Share any receipt with a one-click link.

ReceiptA7F314:02 UTC

Process invoice #441

4 events · 9.2s · exit 0

Verified
hash c72e…f031share link
How receipts stay honest

Every receipt is tamper-proof

Hash chain

Tamper-proof by design

Every event is hash-chained to the one before it. Receipts are append-only. Nobody can edit or delete events after the fact. Not even you.

event[0]
a1f3…9e2c
event[1]
b8d0…4a71
event[2]
c72e…f031
EU · ART. 19

EU AI Act compliance

Article 19 requires high-risk AI systems to retain logs for at least six months. AgentReceipt stores receipts with configurable retention and an immutable hash chain. Enforcement starts August 2026.

SOC 2HIPAASOXSEC

US compliance

SOC 2 audits ask for activity logs. HIPAA requires six-year retention for healthcare data. SOX and SEC rules require financial agents to prove they followed execution rules. One audit trail covers all of them.

+1

Human review, captured

Record approval steps alongside agent actions. When a person signs off before the agent proceeds, that decision is part of the receipt too.

[PII][MEDICAL][FINANCIAL]

PII flagging

Tag events that contain sensitive data. Mark health records, financial data, or personal information so your compliance team knows exactly which events to scrutinise.

Pro · Business

Anchored on a public log

Pro and Business receipts are anchored to the Sigstore Rekor transparency log after every session. This is a public, permanent record that proves the receipt existed at a specific time and has not been changed. Anyone can verify it independently.

rekor-cli
$ rekor-cli search
uuid: 24296fb2…ad77a
index: 142893041
verified
Pricing

Flat monthly pricing. No per-seat fees.

Upgrade when you need more sessions or longer retention.

Free

For developers testing and building.

$0forever

  • 100 sessions/month
  • 7 day retention
  • Hash chain verification
  • Unlimited projects
Start for free
Most popular

Pro

For small teams shipping agents in production.

$49/month

  • 2,500 sessions/month
  • 90 day retention
  • Hash chain verification
  • Anchored on Sigstore Rekor
  • Unlimited projects
Get started

Business

For teams running agents across multiple workflows.

$199/month

  • 15,000 sessions/month
  • 365 day retention
  • Hash chain verification
  • Anchored on Sigstore Rekor
  • Unlimited projects
Get started

Enterprise

Custom

For regulated industries and large-scale deployments.

  • Unlimited sessions
  • Custom retention (up to 7 years)
  • Hash chain verification
  • Anchored on Sigstore Rekor
  • Unlimited projects
Contact sales
FAQ · Docket

Common questions

Everything we get asked before the first integration.

01Will this slow down my agent?
No. The SDK sends events asynchronously in batches. If it cannot reach our servers, it fails silently. Your agent keeps running regardless.
02Where is my data stored?
Event metadata is stored in our database. Raw LLM inputs and outputs are stored separately in Cloudflare R2. You can request deletion of raw payloads at any time to comply with GDPR Article 17.
03Who can see my receipts?
Only members of your workspace. You can invite your compliance team, legal counsel, or any other stakeholder directly. They see everything you see. You can also generate a shareable link for any receipt and send it to anyone. No login required.
04What counts as a session?
One end-to-end agent run. Processing one invoice, handling one support ticket, running one scheduled job. Each session captures up to 200 events.
05Which AI providers does it support?
OpenAI, Anthropic, Gemini, Mistral, and the Vercel AI SDK. Each takes one line of code to integrate.
06Do I need to change my agent code?
No. You wrap your existing AI client with one line. The rest of your code stays exactly as it is.
End of Receipt

Your agents are already taking actions.

Start keeping a record of them. Free plan, no credit card, five minutes to set up.

signed · block c72e…f031