Governance for AI agents that you can prove.

The rules your agents follow — versioned and reviewed like code — and every governed decision sealed to a tamper-evident record, so you can show what governed a decision after the fact. Verified Digital Agents (VDA) is a composable set of governance blocks: each is useful on its own, they are stronger composed, and you can start with one. Governance lives in plain Markdown and git, so VDA governs best-of-breed agents from any provider or framework.

The model

Git holds the rules. Witness holds the events. Everything else sits between them.

The blocks (honest status)

• Witness (live) — seals decisions to a tamper-evident, hash-chained record; the Anchored tier commits the trail to external transparency logs (Sigstore Rekor + RFC-3161 TSAs), provable even against VDA. Surface: signed A2A card + live MCP server.
• C2MD (live) — turns compliance standards into governance your agents can follow, and generates audit-ready documentation. Surface: signed A2A card + A2A skills (no MCP surface).
• ACP — Agent Control Plane (live; federated approval identity rolling out) — governance in git, authored with a Compliance Guard, adversarially tested, and signed before agents get it. Surface: signed A2A card + REST (MCP planned, not live).
• Onboarding (live; deeper evaluation rolling out) — admits agents into a governed environment and issues verifiable credentials. Surface: signed A2A card + A2A skills; admission tools exposed over the Witness MCP.
• Human in the loop (in production via the hospitality flagship) — surfaces what exceeds an agent's limits for a person; the decision is sealed. No standalone A2A card or MCP surface yet.

Get going (MCP / agent-first)

Witness runs a live MCP server — https://witness.getvda.ai/api/witness/mcp. Add it to your agent and ask in plain language; discovering tools, verifying a record, and minting a free key need no setup. Free Sealed tier: 5,000 seals/month, Ed25519-signed and independently verifiable offline (the Anchored tier is externally committed, from EUR 50/mo).

Reporting

VDA turns the sealed trail into audit-ready EU AI Act Article 12 evidence reports and DPIA packs under GDPR Article 35, built from a real run. Examples (demo data): EU AI Act conformance summary, GDPR Art. 35 DPIA. VDA produces the evidence and controls that support compliance; it does not itself deliver legal compliance.

The suite — signed service cards

Witness · C2MD · ACP · Onboarding · llms.txt · this site's card

Watch a governed run · Try your own governance · Book a governance demo · Hospitality flagship console (live Apaleo)

This page is an interactive application — enable JavaScript for the live demo and to contact us.