After an incident, three audiences ask the same question: your insurer, your auditor, and your board. What happened, what did you do about it, and can you prove it? Most businesses answer with a reconstruction from scattered logs. Vindex answers with a ledger.
What's Included
Everything you need, nothing you don't.
Complete recording
- Every step of every alert's journey: original detection, each enrichment result, the AI's classification and confidence
- Which guardrails fired, what was recommended, who approved what and when, what executed, and the outcome
- Human actions carry the named analyst; automated actions carry the evidence that justified them
- Shift handover notes and SLA timers preserved alongside the incidents they cover
Tamper-evident by construction
- Records are SHA-256 hash-chained: each entry cryptographically binds to the ones before it
- Any alteration — by an attacker covering tracks, or anyone else — is mathematically detectable
- Immutable by design: no edit or delete capability, for anyone
- System-level capability promotions inside the platform itself are hash-bound and human-signed
Exportable evidence
- Structured JSON export on demand — no ticket, no waiting
- Complete incident timelines packaged for loss adjusters at claim time
- Meets common UK cyber insurance evidence standards
- ISO 27001 incident-logging compliant
Explainability
- Every automated verdict links to its reasoning: the signals considered, the intelligence consulted
- The confidence score, and the guardrail checks it passed
- No black boxes — for you, your auditor, or us
How it works
Precise at every stage.
01
Record
Every event in the pipeline writes to the ledger as it happens, hash-bound to the entry before it.
02
Sign
Human decisions carry a named analyst signature; automated ones carry their evidence and confidence.
03
Verify
The chain can be independently validated at any time; any tampering breaks it detectably.
04
Export
Incident timelines, compliance evidence, and board reports generate on demand as structured JSON or formatted reports.
Built for the people who ask
Four audiences, one answer.
Cyber insurers
Demonstrate the monitoring, response times, and controls your policy requires. At claim time, export the timeline your loss adjuster will accept.
Auditors
Evidence for Cyber Essentials, ISO 27001, and UK GDPR accountability requirements, collected continuously instead of assembled annually.
Compliance servicesYour board and customers
Answer "are we secure?" with data: what was detected, what was contained, and how fast.
Regulators
UK GDPR expects you to detect breaches and demonstrate your measures. The ledger is that demonstration.
Right for you if…
The organisations that need proof, not just protection.
Your cyber insurance renewal keeps asking for evidence you can't produce quickly
You're preparing for Cyber Essentials Plus, ISO 27001, or a supply-chain audit
Your board asks 'are we secure?' and you want to answer with data
You've experienced an incident and never got a straight answer about what happened
You might also need
Compliance services
Turning continuous evidence into certifications — Cyber Essentials, CE+, and ISO 27001.
Learn more
See what insurer-ready evidence looks like. Book a demo and we'll export a sample incident report.
Ready to close the gap?
Get enterprise-grade protection running in minutes. No disruption, no long contracts, no lock-in.