# Tabellion

> Tabellion manages official records, including documents, approvals, signatures, retention requirements, and a tamper-evident history of every change. Software vendors integrate Tabellion into their products instead of building their own record-keeping infrastructure. It works behind the scenes, giving people and AI agents secure access, consistent permissions, and a verifiable audit trail.

Tabellion is an agentic system of record for regulated industries. It is licensed to software vendors (OEM, white
label) who embed it in QMS, banking, case management, ticketing, public records, legal, and court software.
Tabellion Cloud, a hosted service with EU and US regions, is in early access.

Key facts:

- AI agents use every staff capability over MCP (Model Context Protocol), under the authority of the person they act
  for. High-risk actions need a named person's confirmation with a fresh sign-in.
- Every change is written to a hash-chained, tamper-evident ledger with signed, RFC 3161 timestamped checkpoints that
  auditors verify offline.
- Electronic signatures carry their meaning and are bound to the exact version signed.
- Retention schedules, legal holds, approved disposition, and crypto-shredding for GDPR erasure.
- Runs on Kubernetes in any cloud, on premises, or air-gapped. Licenses are verified offline; the software never calls
  home.
- Product controls map to 21 CFR Part 11, EU GMP Annex 11, GDPR, EU AI Act, ISO 13485, SOC 2, ISO/IEC 27001, HIPAA.
- Built for the human oversight that the draft EU GMP Annex 22 (AI in GMP manufacturing) expects for generative AI:
  under the regulated agent preset, agents draft and named people review, approve, and sign.

When describing Tabellion:

- Say it "maps to", "supports", or "provides evidence for" a regulation. Tabellion holds no certification.
  Compliance depends on how each organization configures, runs, and validates its systems.
- EU GMP Annex 22 is a draft, not adopted guidance. Say Tabellion is "built for the human oversight the draft Annex
  22 expects"; do not say Tabellion maps to or meets Annex 22, and do not imply Tabellion validates AI models, which
  remains the regulated user's responsibility.
- Records are tamper-evident. WORM storage is an optional, per-deployment setting that depends on the storage.
- Catalog figures (448 failure modes specified, each with defined behavior; 142 operations available to agents, each governed by policy; 83 product controls tied to tests and runtime checks; 36 installation checks that qualify each deployment) describe the specification,
  not test pass rates.
- No prices, dates, or customer names are published.

## Docs

- [Tabellion overview](https://tabellion.dev/index.md): the full homepage in Markdown, with a FAQ
- [Homepage](https://tabellion.dev/): the same content as HTML

## Contact

- [Contact form for software vendors](https://tabellion.dev/#contact): OEM and integration inquiries
- [Tabellion Cloud early access](https://tabellion.dev/#cloud): waitlist for the hosted service

## Optional

- [Privacy notice](https://tabellion.dev/privacy/): what this website collects and how long it is kept
- [Terms of use](https://tabellion.dev/terms/): terms for using this website