The spec stays free and open. The hosted registry is a managed evidence infrastructure layer on top of it.
Three layers, cleanly separated. The open standard (PRML, CC BY 4.0, four MIT reference implementations) is free forever and cannot be revoked. The hosted evidence infrastructure (the public registry, and the private Pro registry below) turns locked claims into independently verifiable receipts: Ed25519-signed, RFC 3161 timestamped, mirrored to a public transparency log. Integrations and engagements sit on top. PRML provides one independently verifiable evidence layer inside a broader AI governance and compliance programme; it does not replace your auditors, and the audit opinion itself stays with them.
- Full PRML v0.1 spec + frozen v0.2 RFC (CC BY 4.0)
- Reference implementations in Python, JS, Go, Rust
- 21 byte-equivalent conformance vectors
mlflow-falsifyplugin (PyPI)- Self-host the registry anywhere
- Public manifests on
registry.falsify.dev - Community support via GitHub Issues
- Everything in Developer
- Private hosted registry, tenanted
- 10-year retention design (Article 18 floor) — content-addressed, full export at any time, re-verifiable without falsify
- Up to 1,000 manifests / month
- Up to 8 team members
- Email support, written, 48-hour response
- Conformance badge for your tool or model card
Design-partner pilots
Three pilot slots, fixed-price by scope: Lock €3,000 (~1 week), Lock + Wire €5,000 (~2 weeks), Evidence Pack €7,500 (~3 weeks). First engagements start August 2026. Built for AI audit, assurance and governance practices that want tamper-evident evaluation evidence inside a real client engagement. One pilot covers: scoping one evaluation claim with you, locking it as a PRML manifest before the run, wiring verification into your workflow (CI or checklist), and a worked Evidence Pack you keep. In exchange we ask for a written case study (anonymised if needed) and feedback sessions. Your model passed — can you prove the success criteria were not changed after the test? After a pilot, you can.
Prefer to talk first? Say so in the email and we will find 20 minutes. Everything agreed on a call is confirmed in writing the same day.
Need more than the platform?
Annex IV technical documentation, notified-body submission packages, a signed Evidence Pack, or a full Article 12/15 readiness audit are not part of the Pro subscription. Those are written engagements priced separately by deliverable, scoped in days and weeks rather than monthly bills, and they include twelve months of Pro platform access on top.
Three Sprint tiers exist as standard, post-pilot rates: a five-day Audit Review for one evaluation claim at €15,000, a three-week Full Sprint for multiple claims plus CI deployment at €65,000, and an eight to ten week Enterprise Engagement with custom Annex IV documentation from €180,000. During the pilot phase, start with a design-partner pilot above.
See a sample Evidence Pack for what an Audit Review actually delivers: PRML manifest, SHA-256 commit, verification steps, Annex IV §2(d) and ISO/IEC 42001 mappings, and a clear statement of what the artifact does not certify.
Why two ways to pay
The open spec answers one question: can a third party detect that the evaluator moved the goalposts after seeing the result? That question is free to ask, free to answer, and free to verify. We do not gate that.
The Pro subscription exists for teams that want their manifests in a tenanted private registry built for ten-year retention: content-addressed receipts with full export, so your evidence re-verifies even without falsify. It is the lowest-touch way to run PRML in production.
A Sprint engagement exists for teams that need a written deliverable: an audit memo, an Annex IV section, an Evidence Pack structured for review by a notified body. It is a fixed-scope assurance engagement delivered directly by Falsify, with founder-led technical review included. It is not a subscription, and the price reflects the deliverable rather than seats, volume, or hours.
Most teams start with Developer, move to Pro when they need retention and private storage, then commission a Sprint when an audit lands on the calendar.
FAQ
Why no checkout? Why everything by email?
Every engagement starts with a scoping conversation, because the deliverable is written to your claims and your pipeline rather than sold off a shelf. Once a contract is agreed we invoice from Falsify OÜ (reg. 17574308, Estonia) in EUR — payable by SEPA transfer or international wire (SWIFT).
Why is almost everything written?
Because the written artifact is the deliverable: detailed answers, sample Evidence Packs, and full technical detail arrive in writing so they stay citable, dateable, and re-readable when your auditor reopens the file. Alongside the written record, scheduled video calls are available at every stage — scoping, technical walkthrough, delivery Q&A — in English, at your preference; anything agreed on a call is confirmed in writing the same day.
What's the difference between Pro and a Sprint engagement?
Pro is an ongoing subscription to a hosted private registry. You log in, your team commits manifests, the platform keeps them for ten years. It is self-serve infrastructure, not an engagement: nothing about it is scoped to a person's calendar.
A Sprint is a one-off written engagement. The founder reviews your evaluation claims, writes a memo or a full technical-documentation package (Art. 11 / Annex IV), and signs the output for use with auditors and notified bodies. Sprint pricing reflects scope, not volume. Every Sprint includes twelve months of Pro platform access bundled, so you do not pay twice.
How is this different from a GRC platform like Holistic AI or Credo AI?
It is not the same product. A GRC platform is a top-down dashboard that maps your AI portfolio to a hundred regulatory controls. Falsify is a bottom-up technical primitive for evaluation-claim integrity within Annex IV technical documentation (Art. 11) and Article 15 — pre-committing the evaluation manifest cryptographically so retroactive edits become detectable. The two compose well. Most teams adopting PRML will already have a GRC tool. Falsify is the thing the GRC tool's evidence field points at.
What does "early access" actually mean?
It means three things. First, Pro prices are locked in for your first contract term once signed. Second, we will work with you to shape the v0.3 spec and the Evidence Pack format, in writing. Third, early-access support target: response within two business days. Contractual service levels are set as part of a Sprint engagement.
What if the 2 December 2027 deadline gets pushed?
Article 99 penalties bind regardless of the politics around enforcement timing. Locked evaluation records are also sensible engineering practice independent of the AI Act. Our pricing is not premised on the deadline holding. If you want to wait and see, the Developer tier costs nothing and carries everything needed to implement and verify the standard yourself; what it does not carry is managed retention, organisational controls, or support, which is what production teams add later.
Can a notified body or audit firm use Falsify on behalf of their clients?
Yes. We are explicitly designing the Evidence Pack format with notified bodies in mind. If you are a notified body, an audit firm, or an insurance underwriter and want a technical briefing on how PRML maps to the evidence requirements under ISO/IEC 42001 Control A.8 (record-keeping), email hello@falsify.dev with subject "PRML technical submission" and we will send the pass/fail vectors and schemas the same day.
Open core or open spec?
Open spec. The PRML specification, the four reference implementations, the conformance vectors, the JSON Schema, and the MLflow plugin are all permissively licensed and will stay that way. The Pro subscription adds managed infrastructure around the open standard, not proprietary format features. A Sprint engagement adds a signed written deliverable and the review behind it, not proprietary format features. Using PRML never requires a Falsify account.