The trust model
doesn't depend on us.
Every material record in RegAlign is hash-chained. The chain head is published in each board pack, each regulator export and each attestation. An auditor verifies integrity offline in seconds with the open-source verifier. If RegAlign vanished tomorrow, your evidence still stands up.
Every record carries its receipt
Why this matters: Receipts are append-only. Edit history is on the record itself; the chain proves no record was retroactively introduced or quietly removed.
Offline verifier — runs without us
✓ 412 records · 412 verified ✓ chain head 1d77af…009b21 matches pack footer ✓ attestor signatures verified (4 / 4) ✓ no orphaned records · no rewritten segments PASS — pack integrity intact
Why this matters: The verifier ships as a small open-source binary. The auditor doesn't need a RegAlign account, doesn't need network access, doesn't need vendor cooperation.
Regulator Pack — supervisor-ready in one click
Why this matters: A supervisor visit no longer means a fortnight of evidence collection. The pack is the same evidence the firm worked from — exported in the layout the supervisor expects.
Every material record links to its predecessor. The head is published in every export.
Open-source, ~80 lines. Runs offline. Auditor needs nothing from us.
Who attested what, when, and under which mode (Suggest / Act) is on the record.
Regulator pack respects the MLRO confidentiality boundary — counts only, never content.
Verify a real pack
Download a seeded Saltire pack and the verifier from the trust page. Run it. Then change one byte and run it again.