Defensible answers. Every time.
Witness is the tool your regulator, your auditor, and your customer's procurement team can verify line-by-line.
Legal accuracy is the IP.
Every classification question, every compliance field, every obligation maps to a specific Article, Annex entry, or recital of Regulation (EU) 2024/1689. The mapping lives in a single legal knowledge base that is reviewed before any change ships. Witness's classifier is deterministic — two runs with the same inputs produce the same output. No prompt-sampling randomness in the classification logic.
Data residency: EU.
The application and database run on Railway EU-West (Amsterdam). No data crosses the Atlantic. Paddle, our payment processor, is EU-native and handles VAT as Merchant of Record across all 27 Member States.
GDPR by design.
You control your data. Export or delete any record from your account settings. Our Data Processing Agreement is standard-form and available on request. Anonymous classifier runs are session-only with no personal data stored. Authenticated runs are stored under our DPA.
Tamper-evident audit trail.
Every classification, every edit, every export is timestamped, versioned, and preserved. Confidence scores and article citations travel with every artifact. If a regulator or an auditor challenges a claim, you can reproduce the reasoning chain that produced it.
Security roadmap.
- SOC 2 Type I: on the roadmap, target completion Q4 2026
- Full-disk encryption at rest, TLS 1.3 in transit
- Magic-link authentication; OTP fallback on the roadmap
- Sentry for runtime error tracking (EU region)
- No third-party trackers. First-party analytics (Umami, EU-hosted) only.
Legal disclosures.
Full company disclosure is in the Impressum. Payment processor: Paddle (Paddle.com Market Ltd, London) acting as Merchant of Record. Subprocessors listed in the DPA.
What Witness is not.
Witness automates the compliance work a lawyer or compliance officer would otherwise produce by hand. For novel edge cases, litigation, or negotiated exemptions, consult qualified counsel.