Explainability & audit

Built to be inspected before it is trusted.

Every decision returns which rule fired, on what data, when, and who owns it — with a version history and a tamper-evident record.

The five-click test

Can an operator or auditor reach the proof behind a decision in a few clicks, with a clear owner and version history? That is the bar we design to.

audit-readiness, not a passed audit. Evidence for independent auditor review.

Five-click evidence traildecision → proof

1
Decision
accept / reduce / reject / review / cooling-off
2
Rule + version
which policy fired, at which version
3
Input data
the exact inputs behind it
4
Owner + time
accountable owner, timestamp
5
Tamper-evidence
hash chaining the record

RTS coverage — honestly

We benchmark against the UKGC RTS by choice: it is a high-control reference framework, and we maintain jurisdiction-specific mappings for Curaçao, MGA, Anjouan, Estonia and other regulated markets. This is not a UK-only product — it is held to a stringent reference bar and mapped per regime.

We map each relevant RTS requirement to real evidence, and we show the gaps. Honest coverage is a sign of maturity, not weakness.

Benchmarked against the UK Gambling Commission RTS as a high-control reference framework, with jurisdiction-specific mappings for Curaçao, MGA, Anjouan, Estonia and other regulated markets.

RTS coverage matrixbenchmarked against UKGC RTS as a high-control reference framework · multi-jurisdiction · audit-readiness

RTS 1 Customer account information	PARTIAL	History / net-deposit model exists; 3–12 month retention not enforced.
RTS 5 Result determination	COVERED	Deterministic rules with versioned, tamper-evident provenance.
RTS 10 Interrupted gambling	COVERED	Idempotent reserve → confirm; state recovery, no double-commit.
RTS 12 Financial limits	BOUNDARY	We supply limit / cooling-off decisions; the limit facility is operator / PAM.
RTS 14 Responsible product design	COVERED	14A protective friction covered; 14B withdrawal control is a gap.
Security §4 ISO/IEC 27001:2022 Annex A	COVERED	Auth, tenant isolation, tamper-evident audit, change management; 8.17 clock-sync is a gap.

Legend:COVEREDPARTIALBOUNDARYGAPN/A

Known gaps (RTS 1B/1C retention, RTS 14B, Annex A 8.17) are shown on purpose — honest coverage is a sign of maturity, not weakness. Audit-readiness, not a passed audit.

Ledgerproof does not replace an independent or ISO/IEC 27001 auditor. It prepares the evidence an auditor reviews. We never claim “RTS-compliant”, “certified”, or a “passed audit” — only aligned with and audit-readiness.