Skip to main content
AlgoVoi Evidence Auditor verifies every signature across an archive of documents and produces a signed, tamper-evident audit report you can hand to an auditor, then re-run each cycle to prove nothing changed. It is the middle rung between the free verifier (check one document) and the Compliance Suite (manage the whole records lifecycle).

​
The ladder

  • Free algovoi-reseal-verify: inspect and verify a single document.
  • Evidence Auditor (this): batch-verify a whole archive + the signed report.
  • Compliance Suite: store write-once, retain, place legal holds, run a console, forward to SIEM, custody keys, seal at scale.

​
Use

After purchase on the Suite Store you receive an index token and a licence key. Install the auditor from the token-gated AlgoVoi index (its public dependencies come from PyPI):
run produces audit-report.json (findings), audit-report.json.reseal.json (the signed attestation), audit-report.html, and audit-report.csv.

​
The report verifies itself, with the free tool

The report is signed with a post-quantum reseal envelope, so anyone can confirm it is authentic and unaltered using the free verifier, no licence needed:

​
What it flags per document

verified / invalid, unsigned, weak digest (SHA-1), expired certificate, broken trust chain, partial-coverage (shadow) PDF, and post-quantum exposure, with optional offline trust-path (--trust-roots) and CRL (--crl) checks. Every report that flags quantum-exposed documents is your cue to re-anchor them.

​
Scope

Read-only: it verifies and reports; it never stores, mutates, or governs your documents. Auditing an archive is the licensed action (gated at the engine, fail-closed); verifying an existing report is free with av-reseal-verify, as is single-document verification. Air-gap capable, no upload.

​
Frequently asked questions

​
What is AlgoVoi Evidence Auditor?

Evidence Auditor verifies every signature across an archive of signed documents (classical RSA/ECDSA and post-quantum) and produces a signed, tamper-evident audit report you can hand to an auditor, then re-run each cycle to prove nothing changed. It is read-only, self-hosted, and air-gap capable, and it never stores, mutates, or governs your documents.

​
How is it different from the free verifier and the Compliance Suite?

It is the middle rung of the ladder. The free av-reseal-verify checks one document. Evidence Auditor batch-verifies a whole archive and produces the signed report. The Compliance Suite goes further: write-once storage, retention, legal holds, a console, SIEM forwarding, key custody, and sealing at scale.

​
Can the audit report be trusted and verified independently?

Yes. The report is signed with a post-quantum reseal envelope, so anyone can confirm it is authentic and unaltered using the free av-reseal-verify tool with no licence needed. The party you hand the report to verifies it themselves, offline, rather than taking your word for it.

​
What does it flag per document?

Per document it reports verified or invalid, unsigned, weak digest (SHA-1), expired certificate, broken trust chain, partial-coverage (shadow) PDF, and post-quantum exposure, with optional offline trust-path and CRL checks. A baseline diff re-runs against a prior report to show changed, new, and removed items.

​
Is it read-only and air-gap capable?

Yes. Evidence Auditor verifies and reports; it never stores, mutates, or governs your documents, and it uploads nothing. Auditing an archive is the licensed action, gated at the engine and fail-closed; verifying an existing report is free with av-reseal-verify, as is single-document verification.

​
How much does Evidence Auditor cost?

A licensed product from 599 USD perpetual or 299 USD per year, bought self-serve from the suite store. Verifying the report it produces is always free with the open av-reseal-verify tool.

​
See also