Skip to main content

Jorv Builder · Compliance

Article 12-ready by default.

The deadline keeps moving. Your evidence shouldn’t have to. Every Jorv Builder cockpit writes a PROV chain that holds against whatever Article 12 ends up requiring.

PROV chain on every change

Every Brain action — brainstorm, plan, code edit, test run, deploy step — lands as a typed PROV node with cryptographic continuity. Replay any decision months later with the prompt, model, context, output, and human approval intact.

WORM-style audit storage

Audit records are write-once on the local SQLite store and Merkle-rooted into a daily checkpoint. Enterprise tier writes the same chain to your corporate WORM bucket (S3 Object Lock, Azure Blob Immutable, GCS Bucket Lock).

Two-key merge for regulated branches

On regulated branches, a merge requires two distinct human approvers with separate audit identities. The Brain can propose; only humans with keys can land. Auditor and engineer roles separate cleanly.

Merkle-rooted PROV checkpoints

Daily Merkle root publishes externally (your blob, your audit trail) so the chain can be verified end-to-end without trusting Jorv Builder. Future-proof against subpoena and external audit.

TMF export (eTMF-ready)

Enterprise tier exports a TMF-shaped package: PROV chain, artefacts, approvals, dispositions — bundled per study/asset/release. Drop straight into your eTMF system.

Brainstorm-gated merges

Default-on: a feature cannot merge without a referenced Brainstorm artefact. The Brainstorm is the evidence of considered design — the "why" you can show the regulator months later.

The Compliance Center

Every finding, every dismissal, every two-key merge — visible in one HUD, exportable in one click.

Screenshot · compliance-center-overview
2880×1620 (retina)
Compliance Center: PROV chain inspector, findings dashboard, dismissal log with attribution.

What’s included by tier

TierPROV chainWORM auditTwo-key mergeMerkle checkpointTMF export
Sololocal
Teamlocalopt
Enterprisecorp

local = on-device WORM-style storage · corp = your corporate WORM bucket · opt = optional configuration

Tell us about your audit posture.

Working under MDR, IVDR, GxP, SOC 2 Type 2, or a new Article 12 readiness pass? We’ll walk you through whether Enterprise covers what you need.