Cryptographic proof
for the EU's digital decade.

Anchored Provenance Receipts

Records the actor, timestamp, and method of an artifact's creation. Binds automated outputs to a declared issuer key and supports the EU AI Act's GPAI provenance disclosure obligations. The first Anchors family to enter production.

ar.provenance.v1

AI Act Art. 53 · DSA Art. 24

Anchored Consent Receipts

Records consent given, withdrawn, or modified by a data subject. Three wire types cover the full consent lifecycle, including the Art. 7(3) right of withdrawal — the gap auditors most often flag in CMP outputs.

ar.consent.v1 · ar.modification.v1 · ar.withdrawal.v1

GDPR Art. 7 · Art. 7(3)

Anchored Retention Receipts

Six wire types covering the full retention lifecycle — scheduled expiry, subject-initiated erasure, legal hold, anonymisation, archive transition, and Merkle-batched bulk events. The data-lifecycle counterpart to ACR.

ar.erasure.v1 · ar.expiry.v1 · ar.hold.v1 · ar.anonymization.v1 · ar.archive.v1 · ar.batch.v1

GDPR Art. 5(1)(e) · Art. 17 · Art. 11

Anchored Lineage Receipts

Records derivation lineage — input hashes, transformation, output hash, disclosure chain. Uses the W3C Bitstring Status List 2021 standard for revocation. Anchors GPAI training-data provenance obligations.

ar.lineage.v1

GDPR Art. 13 · AI Act Art. 53 · Data Act 2023/2854

Anchored Notice Receipts

Records the delivery and acknowledgement of a transparency notice. Bridges the gap between 'we published it' and 'the subject saw it' — the cryptographic foundation required before a valid ACR consent can be issued.

ar.notice.v1

GDPR Arts. 12–14 · Art. 26

Anchored Breach Receipts

Records the personal-data breach lifecycle — detection, assessment, DPA notification, subject notification, containment, and closure. Anchors the 72-hour Art. 33 reporting clock against an independently verifiable timestamp.

ar.breach.v1

GDPR Arts. 33–34 · NIS2 Art. 23 · DORA Art. 19

Anchored Subject-Rights Receipts

Records the lifecycle of a data-subject rights request — access, rectification, restriction, portability, and objection. One chain per request; profile-typed events per right. Composes with ARR for erasure execution evidence.

ar.subject_rights.v1

GDPR Arts. 15, 16, 18, 20, 21

Anchored Impact-Assessment Receipts

Records the DPIA lifecycle — necessity check, risk assessment, mitigation plan, DPO advice, and supervisory-authority prior consultation. Composes with APuR, ATR, and AER for a complete risk-evidence bundle.

ar.impact.v1

GDPR Arts. 35–36

Anchored Tokenization Receipts

Records the lifecycle of a pseudonymous data token — issuance, redemption, revocation, and rotation. Provides the cryptographic substrate for GDPR Art. 4(5) pseudonymisation claims that hold up under supervisory scrutiny.

ar.tokenization.v1

GDPR Art. 4(5) · ePrivacy · ISO/IEC 29101

Anchored Purpose Receipts

Records the binding between a processing event and a declared purpose. Provides the cryptographic substrate for purpose-limitation enforcement and Art. 6(4) compatibility analysis — the backbone of a defensible Record of Processing Activities.

ar.purpose.v1

GDPR Art. 5(1)(b) · Art. 6(4) · Art. 30 RoPA

Anchored Transfer Receipts

Records a cross-border transfer of personal data — legal basis (Art. 45 adequacy, Art. 46 SCCs, or Art. 49 derogation), transfer impact assessment reference, recipient identity and jurisdiction.

ar.transfer.v1

GDPR Chapter V · Schrems II

Anchored Evaluation Receipts

Records the execution and outcome of an automated evaluation — model conformity assessment, bias audit, or transparency check. The adm.v1 profile targets high-risk AI system Art. 43 third-party conformity flows.

ar.evaluation.v1

AI Act Art. 43 · Art. 50 · ISO/IEC 42001

Anchored Attestation Receipts

Records a qualified trust service issuance — qualified signatures, qualified electronic seals, qualified timestamps, and EUDI Wallet Electronic Attestations of Attributes (EAA) under the revised eIDAS regulation.

ar.attestation.v1

eIDAS 2 Arts. 22, 25, 32–34 · ETSI EN 319

Anchored Delegation Receipts

Records that a principal delegated a bounded authority to an agent — controller→processor instructions, AI deployer mandates, EUDI Wallet powers of representation, and DSA legal-representative chains.

ar.delegation.v1

GDPR Art. 28 · AI Act Art. 26 · eIDAS 2

Anchored Action Receipts

Records every autonomous action an agent takes on a user's behalf — the verb, the rule and recipe that authorised it, the outcome, and commitments to the decision, parameters, and request. The proof a regulated business needs to let an agent act unsupervised.

ar.action.v1

GDPR Art. 22 · AI Act Arts. 12, 14

Anchored Quality Receipts

Records that a named eval suite scored a specific output or version, pinned by hash so anyone can re-run it. Evaluation provenance, not a correctness guarantee — deliberately distinct from AER's regulatory conformity.

ar.quality.v1

AI Act Art. 15 · Art. 9

Anchored Guard Verdicts

Records that untrusted inbound content was screened against a named, versioned ruleset for prompt-injection and jailbreak patterns, with a reproducible verdict. Screening provenance, not a safety guarantee.

ar.guard.v1

AI Act Art. 15 · Art. 9

Anchored Grounding Receipts

Records that the claims in a RAG answer bind to specific spans of named sources — re-checkable by anyone holding the sources, with a method-attributed support score. Citation-binding provenance, not a truth guarantee.

ar.grounding.v1

AI Act Art. 13 · Art. 15

Anchored Agent-Trace Receipts

Records how an agent run executed — the named pipeline stages in order, the outcome, and a commitment to the full detailed trace. Execution provenance, not verified behaviour. The run-level counterpart to AActR.

ar.trace.v1

AI Act Art. 12 · Art. 14