🏛️ VERIDEX

EU AI Act Compliance OS

Continuous, cryptographically-signed evidence for high-risk AI systems — turning drift alerts into governance you can hand to an auditor.

_{This is a public showcase. The source is proprietary — evaluation access on request.}

---

🤔 The gap VERIDEX fills

A drift alert sitting in Slack is operational. A drift alert that opens a control re-assessment, writes a technical-documentation entry, and emits a signed evidence bundle is governance. VERIDEX sits exactly on that line — between ML monitoring and AI governance — which is the defensible niche as the market consolidates.

🧩 What it does

VERIDEX provides continuous, evidence-grade support for the operator obligations of the EU AI Act (Regulation 2024/1689):

Article	Capability	Maturity
Art. 9 Risk management	Risk-register endpoints + persistence	shipped
Art. 12 Logging	Append-only inference-event log, bulk ingest	shipped
Art. 13 Transparency	Versioned transparency-statement generator (fingerprinted)	shipped
Art. 14 Human oversight	Approval queue + append-only approval-audit events	shipped
Art. 15 Accuracy / robustness / drift	CCDD engine + signed audit bundles	shipped — core asset
Annex IV Technical doc	Generator + optional LLM augmenter (provenance-banded)	shipped

Honest scope. Article-15 support is VERIDEX's interpretation — not confirmed by an authority or notified body. VERIDEX provides evidence building-blocks; it does not certify compliance and must never be sold as "certified".

🎯 The core: Art. 15 engine (CCDD)

A productized conformal drift-detection system with finite-sample guarantees: a multi-detector composite (distance + variance + pairwise-KS, with multiple-testing correction), a mode-collapse detector, and a recalibration loop — every alert wrapped in an Ed25519 DSSE-signed audit bundle a third party can verify. The conformal mathematics is on the published state of the art; the moat is the audit-ready productization.

🏗️ Architecture

  Inference events ─▶ Logging (Art.12) ─▶ CCDD drift engine (Art.15)
                                                │
                          drift alert ──────────┤
                                                ▼
   Annex-IV entry ◀── Approval queue (Art.14) ◀── signed evidence bundle
        │                                            │
        ▼                                            ▼
  Transparency stmt (Art.13)               Ed25519 / DSSE verifier

FastAPI backend · Postgres row-level security multi-tenancy · Alembic migrations · Helm chart · externally-reproducible test container · OpenTelemetry tracing.

🔬 Engineering

• Cross-replica rate-limit + brute-force backends, fail-closed multi-replica guard
• Mutation-tested + an automated honesty CI that fails the build when a documented claim has no passing test
• Built on the open trust-core primitives (conformal + signed receipts)

📊 Honest status

Pre-customer, private beta. No production deployment, no external security audit, no ISO-42001/TÜV/BSI certification (an ISO-42001 mapping exists as a sales asset — not a certificate). What works is tested and reproducible; what doesn't exist is listed openly.

🔑 Access

Source and a guided demo are available under a commercial/evaluation license on request.

Ozan Küsmez — ozan.kuesmez@outlook.com

---

_{© 2026 Ozan Küsmez. VERIDEX is proprietary software, all rights reserved. This showcase repository contains documentation only. VERIDEX does not constitute conformity assessment under Regulation (EU) 2024/1689.}