Compliance by Construction

Compliance is part of the receipt, not a checklist.

Hive doesn't bolt compliance on afterward. Every single receipt is built to meet eIDAS 2.0, ALCOA+, FSMA-204, NIST AI RMF, and the EU AI Act. Auditors get evidence in the exact form they already accept.

Open the diligence room See an audited receipt

Three things, baked in.

Frameworks change. Audit standards shift. But the receipt is built once, to cover every rule that applies to a regulated job, so the same receipt clears every audit.

eIDAS 2.0

Qualified electronic signature (QES) shape. Trust service provider attestation path. Annex IV alignment for cross-border legal effect.

ALCOA+

Attributable, legible, made at the time, original, accurate. Plus complete, consistent, lasting, and available. All baked into the receipt.

EU AI Act

Article 12 logging, Article 14 human oversight markers, Article 26 record-keeping. All in one receipt.

Six frameworks, one receipt.

Each Hive receipt carries the fields needed to meet several rules at once. Auditors don't have to translate anything. The receipt already speaks their language.

eIDAS 2.0EU · cross-border
QES signature shape, trust service provider attestation, qualified timestamp, signer DID resolution path. Designed against Annex IV.
ALCOA+FDA · pharma
Audit trail, custody chain, contemporaneous timestamps, immutable origin, accuracy markers. Receipt is the data integrity record.
FSMA-204FDA · food traceability
Cargo lineage, critical-tracking-event tags, key-data-element fields, traceability-lot codes embedded in the receipt body.
NIST AI RMFUS · AI governance
Govern / Map / Measure / Manage tags, model card reference, risk-tier marker, human-oversight checkpoint references.
GDPREU · privacy
Controller DID, lawful-basis field, data-subject reference (pseudonymized), retention horizon, processor chain attestation.
HIPAAUS · healthcare
A PHI-safe receipt mode. Protected health information never goes into the receipt itself. Only its hash and an access record get signed.

What it looks like.

One receipt, listing every rule it meets. Auditors check that list against the receipt body and the published Hive schema.

{ "receipt_id": "rcp_alc_4f9b2a08...", "workload": "clinical-trial-data-capture", "controller_did": "did:hive:tenant.acme", "compliance_alignment": [ "eIDAS-2.0", "ALCOA+", "FSMA-204", "NIST-AI-RMF", "GDPR" ], "alcoa_fields": { "attributable": "did:hive:user.kim", "contemporaneous_ts": 1778413989.591, "original_hash": "sha256:8b2a...e093", "audit_trail_id": "audit_2025q4_pharma_037" }, "ai_rmf_tags": ["govern.policy", "measure.evals", "manage.incident"], "sig_ed25519_b64u": "4oqQKBNgRM8EoFKAki...", "sig_mldsa65_b64u": "Sdy4QPkwR3v8H9TK...", "did": "did:hive:hivemorph", "chain": { "network": "Base", "chain_id": 8453 } }

Vertical applications.

ALCOA AgentGuard

Pharma trial-data integrity at the agent boundary.

FSMA-204

Food traceability with critical-tracking-event receipts.

HIPAA-Hive

PHI-safe receipts for healthcare workloads.

CLEAR

Prior-authorization attestation for payors.

Compliance overview

The full Hive compliance posture in one place.

Diligence room

Auditor-ready evidence package, signed receipts included.
Open the diligence room