How does AI Integrity help with Bank of Israel Directive 369?

AI Integrity automatically records every AI model decision with full inputs, outputs, and reasoning. Each event is hash-chained (SHA-256), creating a tamper-evident audit trail that satisfies Directive 369's requirements for model risk management, validation, and ongoing monitoring. The evidence bundle is signed (Ed25519) and ready to submit to the regulator.

What is the Privacy Protection Amendment 13 (Israel) requirement for AI agents?

Israel's Privacy Protection Amendment 13, in effect since August 2025, requires organizations to: (1) explain in clear language how automated decisions are made, (2) maintain tamper-evident records of all automated processing involving personal data, and (3) conduct a Data Protection Impact Assessment (DPIA) before deploying AI systems. The Privacy Protection Authority (PPA) issued specific AI guidance in May 2025.

Does AI Integrity comply with EU AI Act Article 12?

Yes. Article 12 (in force August 2026) requires high-risk AI systems to maintain logs for at least 6 months with full traceability, accuracy, and tamper-evidence. AI Integrity generates hash-chained logs (SHA-256), automatic retention policies, and one-click signed evidence bundles that satisfy Article 12 audit requirements.

How long does it take to install AI Integrity?

30 seconds. Add 3 lines of Python: import the client, instantiate it with your API key, and call client.track() on any agent function. Your first evidence bundle is ready in 30 additional seconds.

Is AI Integrity open source?

Yes. AI Integrity is released under the MIT license. You can self-host the entire stack (FastAPI + SQLite/Postgres + Python SDK) on your own infrastructure. The source code is at https://github.com/razel369/ai-integrity.

Built for Bank of Israel · PPA · EU AI Act

When the regulator asks,
you already have the answer.

Name: AI Integrity
Author: AI Integrity

The 3-line SDK that turns every AI agent decision into a tamper-evident audit trail. One-click evidence bundles. Bank of Israel Directive 369. Privacy Protection Amendment 13. EU AI Act Article 12. All mapped.

npm install ai-integrity → View on GitHub

~/your-project · zsh

# Install $ pip install ai-integrity # Add 3 lines to your agent from ai_integrity import AgentClient client = AgentClient(api_key="aik_live_...") @client.track(tool="credit_decision") def process_loan(application): result = my_llm.analyze(application) return result # Audit trail activates automatically. # Get a signed evidence bundle in 30 seconds: $ curl https://api.ai-integrity.dev/v1/runs/run_8a3f2c/evidence.zip \\ -H "X-API-Key: aik_live_..." -o evidence.zip # evidence.zip contains: # audit.json — every event, hash-chained # audit.txt — human summary # chain_proof.txt — proof of integrity # summary.md — explainer for regulators # signature.sig — Ed25519 signature

Built for the regulators you actually face

🇮🇱 Bank of Israel

🇮🇱 Privacy Protection Authority

🇮🇱 Ministry of Health

🇪🇺 EU AI Act

🇺🇸 SOC 2 · HIPAA

By the numbers

Built for the moment the auditor walks in.

No more screenshots, no more spreadsheets, no more "we'll get back to you in 2 weeks."

30s

to install

1×

click to evidence bundle

probability of undetectable tampering

How it works

Three lines of code.
Three questions answered.

Every auditor asks the same three things. AI Integrity turns each into a one-click artifact.

"What did the agent do?"

Every tool call, LLM call, and decision is recorded automatically with full inputs, outputs, and metadata. Nothing to write. Nothing to remember.

"Why did it do that?"

Each event includes the reasoning chain, the policies evaluated, and the decision rule that fired. Written in policy-as-code that your auditors can read.

"Prove it wasn't changed."

SHA-256 hash chain. Each event links to the previous one cryptographically. Ed25519 signature on the bundle. The auditor verifies in 10 seconds without installing anything.

What's inside

Everything you need.
Nothing you don't.

Tamper-evident hash chain

SHA-256 link between every event. Modify any byte — the chain breaks. Auditors verify in Python without any special tool.

Policy as Code

Write rules in Markdown. Git-version them. The same policy engine runs in dev, CI, and production. No more policy that's "in someone's head."

Pre-built compliance packs

15 rules for Israeli banking, 14 for digital health. Import with one curl. Customize for your business. Done.

Live trace streaming

WebSocket stream of every decision as it happens. Drop into a Grafana-style dashboard. Useful for incident response.

Signed webhooks

Push events to Slack, Jira, SIEM. HMAC-SHA256 signed. Retries with exponential backoff. Your existing stack keeps working.

Re-evaluate history

Policy changed? Run the new policy against every past decision. The auditor gets a delta report in seconds.

Built-in regulators

Maps directly to the regulations you face.

No translation layer. No consulting hours. The evidence you generate is the evidence regulators expect.

Bank of Israel Directive 369

Model risk management, validation, ongoing monitoring, board reporting.

Bank of Israel Directive 364

IT risk management, cybersecurity governance, third-party controls.

Privacy Protection Amendment 13

Explainability for automated decisions, DPIA, data subject rights.

PPA AI Guidance (May 2025)

Continuous monitoring, bias testing, decision logging for AI systems.

Health Information Mobility Law 2024

FHIR standard, PHI access logging, patient consent for AI processing.

EU AI Act Article 12

6-month log retention, traceability, tamper-evidence for high-risk AI.

AML / Sanctions (Israel)

Suspicious pattern detection, sanction list screening, transaction logging.

SOC 2 Type II

Logging, monitoring, change management, evidence retention.

HIPAA

PHI access logging, audit trails, breach detection.

Pricing

Open source. Honest pricing.

No "Contact Sales". No surprise invoices. Self-host or use the cloud.

Open Source

$0/forever

Full MIT-licensed codebase
Self-host anywhere
SQLite or PostgreSQL
All 30+ policies
Community support on GitHub

View on GitHub

Cloud

$99/month

100,000 events / month
Unlimited evidence bundles
Hosted, multi-region
Slack, webhooks, SIEM
Email support (24h)

Start free →

Enterprise

$499+/month

Unlimited events
VPC self-host
Custom compliance packs
Dedicated engineer
SOC 2 Type 2 assistance

Contact

From the blog

In-depth guides for Israeli teams.

Practical, regulation-specific advice for fintech, health, and enterprise AI teams in Israel.

₪

Bank of Israel Directive 369 — complete guide

7 requirements, what changed in June 2026, and how to comply with AI agents. With FAQ Schema for AI Overviews.

Privacy Protection Amendment 13 + AI

What every startup needs to know about the new Israeli privacy law, the PPA AI guidance, and the penalties for non-compliance.

Browse all articles →

Stop scrambling when the auditor arrives.

30 seconds to install. 30 seconds to your first evidence bundle. Open source. No credit card.

npm install ai-integrity → Read the docs

When the regulator asks,you already have the answer.