# AuditKit

> Hosted tamper-evident audit log for B2B SaaS. Events are hash-chained per tenant, acknowledged with Ed25519-signed receipts, batched into Merkle roots, and anchored to Sigstore Rekor and OpenTimestamps. Anyone can verify an export offline with `@auditkit/verify` without trusting AuditKit (until it is published to npm, run `node packages/verify/dist/cli.js <file>` from the repository; `npx @auditkit/verify` is the eventual command). Open source (AGPL); Free tier, Pro $49/mo, Business $199/mo.

AuditKit is a REST API plus an MCP server in the same process. GDPR erasure uses crypto-shredding (per-event salt deleted with the payload) so the chain stays valid after a payload is deleted. The server stores customer client signatures and the verifier checks them; the verifier trusts Rekor's log key and Bitcoin, not AuditKit.

## Docs
- [Quickstart](https://auditkit.dev/docs#quickstart): first event in five lines, TypeScript or Python
- [API reference](https://auditkit.dev/docs#api): REST, OpenAPI at https://api.auditkit.dev/openapi.json
- [Offline verifier](https://auditkit.dev/docs#export): how @auditkit/verify checks a JSONL export against Rekor and OTS
- [MCP connector](https://auditkit.dev/docs#mcp): seven tools, Streamable HTTP, Claude setup
- [Erasure](https://auditkit.dev/docs#erase): crypto-shredding design
- [Viewer tokens](https://auditkit.dev/docs#viewer): read-only tenant-scoped links for auditors

## Proof
- [Anchors](https://auditkit.dev/anchors): latest anchored roots with Rekor entries, live
- [Security](https://auditkit.dev/security): hashing, signing keys, threat model

## Compare
- [WorkOS Audit Logs](https://auditkit.dev/compare/workos)
- [Postgres audit tables, cloud ledgers, open source](https://auditkit.dev/compare/postgres)

## Optional
- [Pricing](https://auditkit.dev/pricing)
- [Blog](https://auditkit.dev/blog)