AscentAI
AscentAI is a regulatory lifecycle management platform for financial institutions, built around the idea that a firm should hold a register of the specific obligations that apply to it rather than a library of the rules at large. The platform ships as two modules. AscentHorizon is global horizon scanning: it collects regulatory news, guidance, enforcement actions and amendments, filters them to a customer's declared interests, links related documents automatically, and gives teams shared workflows and activity tracking over the result. AscentFocus builds and maintains the obligations inventory itself, identifying gaps and duplicates in the register, then automatically assessing which regulatory changes affect which obligations. Around those sit rule comparison with old and new versions shown side by side and changes redlined, AI-generated summaries of what a rule change means, impact assessment against the register, and an audit trail that records activity for examination readiness. Obligations can be mapped through to internal policies and controls, and the platform integrates with GRC systems including MCO, LogicGate, Onspring, Resolver and Corestream so that policy and control records reflect current requirements. Coverage is stated as 98 countries, roughly 1,000 data sources and 400,000 obligations, spanning banking and non-banking financial services, crypto and digital assets, market infrastructure, and cross-segment topics including consumer protection, consumer privacy, anti-money laundering, counter-financial terrorism and ESG. The company was known as Ascent Technologies Inc. and announced its rebrand to AscentAI in March 2025; it is based in Chicago, holds a SOC 2 Type I attestation, and runs a security programme aligned to the NIST Cybersecurity Framework.
Capability grades
All 15 axes, graded from public sources on the date shown. Hover a grade to see what the letter means on that axis.
AI Centrality
How much of the product is actually AI. Whether the machine learning is the mechanism the buyer is paying for or a feature layered onto conventional software, and whether the vendor is specific about which is which.
The models are the engine of the capability the buyer is actually paying for, sitting on a content and workflow product that would survive without them. What distinguishes AscentAI from a regulatory news feed is the obligations layer: the platform derives a firm-specific register of obligations from the rule corpus and then automatically assesses which incoming changes hit which obligation, with auto-generated summaries of what changed. The company's own framing puts this at the centre, describing itself as delivering fully processed information ready for action, unlike document-based vendors, and a 2022 announcement describes patented AI and natural language processing technology as the mechanism. Strip the models out and a real product remains: a global regulatory content database across a stated 98 countries and 1,000 sources, a manually maintained obligations register, collaborative workflows, audit trails and GRC integrations. That is the B shape rather than the A shape. The rebrand from Ascent Technologies to AscentAI in March 2025 is branding and was not treated as evidence of centrality.
Citation Accuracy and Hallucination Disclosure
Whether the vendor publishes measured accuracy on citations and assertions, grounds output to primary sources, and says plainly what its system does when it does not know. Legal has a documented public record of fabricated citations reaching filed briefs, so an untested claim of accuracy is not evidence.
Accuracy is asserted in strong terms across the marketing and measured nowhere, and the agreement says something materially different. The product pages promise a high-confidence regulatory register, a rock-solid inventory of corporate obligations, a single enterprise-wide source of regulatory truth, that a user will never miss a regulatory update, and that accurate change management automation powered by AI eliminates human error. No benchmark, error rate, test set, precision or recall figure for obligation extraction or applicability assessment was located on any surface read. Grounding is real in one respect that matters here: Rule Compare shows the new and former versions of a rule side by side with changes redlined, so a user can open the underlying regulatory text rather than take a summary on trust. Against the marketing, the terms of service state that all Content is for informational purposes only, may not reflect the most current regulatory developments, and is not guaranteed to be correct, complete or up to date, and the History Views clause describes the register as reflecting Ascent's best guess of the rules applicable to the customer. Graded on the agreement per the documents-beat-marketing rule.
Autonomy and Oversight Model
What the system decides on its own, what a lawyer must approve, and whether the vendor documents where the review point sits. A tool that drafts under review and a tool that files without one are different products and different risks.
What the system does alone is described and what constrains it is not. Automation is the explicit pitch: changes are captured in real time, applicability against the obligations inventory is assessed automatically, and summaries are auto-generated, with the vendor stating that every update is automatically assessed for applicability and presented to users ready for action. Nothing located describes a review point inside the product, a confidence threshold at which the system defers, or what happens after an assessment is wrong. The audit trail is a record of activity rather than a control over it. The one real oversight statement is contractual rather than functional: the terms tell the user that if a problem is too complex to be addressed by Ascent and its Solutions they should consult a Compliance Professional, and that the user is solely responsible for compliance with applicable laws and for any use made of the Solutions. That places the duty rather than describing a mechanism. This matters more than usual in this category, where the output is consumed by people who cannot spot a wrong answer.
Operational and Outcome Evidence
Named, dated evidence that the product works in production at real firms or legal departments. Case studies with figures and identified customers count. Unattributed testimonials and launch announcements do not.
One unattributed testimonial carries the whole of it. The home page quotes a compliance executive at a large financial services firm on the difficulty of finding vendors who identify a firm's obligations rather than merely stating the rules; no organisation, name or date is attached. No customer logos were located anywhere on the surfaces read, which is unusual, and the partner logos that do appear, MCO, LogicGate, Onspring, Resolver and Corestream, are GRC integrations rather than customers. Claims of scale are made about the corpus rather than the customer base. First-party announcements describe partnerships with Halo Ai and with Diligent and are announcements rather than deployment evidence. Checked the home page, the RLM Platform page, the Compliance buyer page, the security page and the terms of service on 1 September 2026; the Resources library, the blog and the Regulatory Roundup were not opened, so a named dated customer outcome was neither found nor excluded.
Privilege and Confidentiality Posture
How client confidences are handled: attorney client privilege and work product treatment, segregation of one client matter from another, whether client data trains any model, and what the vendor commits to in writing rather than in marketing.
Technical protection is published in detail and the handling of customer content is not addressed at all. The security page is specific about the perimeter: AES-256 at rest using FIPS 140-2 validated hardware security modules with automatic key rotation, TLS 1.2 or 1.3 in transit, runtime secret injection rather than hardcoded secrets, SSO with phishing-resistant WebAuthn factors, role-based employee access and automatic deprovisioning on termination. None of that speaks to the questions this axis asks. No position on training was located, in the terms, on the security page or anywhere else. No retention or deletion commitment for customer content exists. No data processing agreement is published. Segregation between customers, users or matters is never described. Two clauses run the other way and deserve naming: the terms advise that the customer should not send confidential information in response to the Site, and state that Ascent cannot guarantee the confidentiality of any communication or material transmitted to it via the Site or by email, disclaiming liability for third-party interception. Those are scoped to communications rather than to platform data, but they are the only confidentiality statements located.
UPL and Professional Responsibility Posture
Whether the vendor is clear that it supplies a tool rather than legal advice, who its audience is, and how it addresses unauthorized practice of law, competence and supervision duties, and jurisdiction limits. ABA Formal Opinion 512 is the reference point.
This is the most developed professional responsibility posture located in the pull so far, and it stops one limb short of the top band. The terms carry four separate headed treatments of the question. Ascent states that it is not a law firm, attorney, nor does it dispense legal advice, and that a user requiring legal advice agrees to contact their attorney. A section headed that the Site and Solutions are not legal services states that no attorney-client relationship is created or implied, and expressly addresses privilege, saying any such relationship and any privileges related to it may only be formed between the user and that attorney under its own engagement and conflict checking procedures. A further section states that Ascent is not a law or compliance firm, may not perform services performed by a Compliance Professional, and that its Solutions, forms and templates are not a substitute for one. Jurisdiction limits are named rather than implied: the subject matter is said to vary from jurisdiction to jurisdiction and between regulatory bodies, to be subject to differing interpretation by courts and regulators, and no general tool is claimed to fit every circumstance, with a direction to consult a Compliance Professional in the user's area. What is absent is the supervision and competence dimension: nothing addresses how the product supports a practitioner's own duties, and no bar or ethics guidance is named anywhere.
AI Governance and Bias Disclosure
Published governance over model behaviour: who owns it inside the vendor, what is tested before release, and what is disclosed about disparate output across matter types, parties, or populations.
Not yet assessed.
AI Safety and Data Stewardship
Retention, deletion, access control, and what happens to prompts and documents after they are processed. Whether the vendor states its subprocessors and its incident practice, or leaves the buyer to assume.
The perimeter is documented well and what happens to customer content after processing is not addressed. Published and specific: AES-256 at rest with FIPS 140-2 validated hardware security modules and automatic key rotation, RSA-2048 and SHA-256 named as accepted algorithms, TLS 1.2 or 1.3 in transit, secret management by runtime injection with HSM-backed key storage, annual penetration testing plus regular vulnerability scanning with named tooling categories, centrally managed endpoints with mobile device management enforcing disk encryption and screen lock, endpoint alerting monitored around the clock, remote access secured through Tailscale on WireGuard, malware-blocking DNS, and security training delivered through Vanta at onboarding with annual recertification. Against that, three of the limbs this axis names are simply absent: no retention period is published for customer content, no deletion commitment or route is described, and no subprocessor list exists anywhere on the property. No incident or breach notification practice was located either. The privacy policy, recovered through search after the page would not fetch directly, addresses website visitors and states that customer data is primarily stored in the United States while it may be transferred and accessed from around the world.
AI Liability and Recourse
What the vendor stands behind contractually when its output is wrong. Indemnities, caps, carve outs, insurance, and whether any of it is published or only reachable through a negotiated agreement.
The allocation of loss is published, readable in advance, and points in one direction throughout. Liability is capped twice over: the limitation clause caps at the previous six months of customer payments where a jurisdiction does not permit outright exclusion, and a separate Liability Cap section caps aggregate cumulative liability at the annual fee paid, expressly stating that the cap includes indirect and consequential damages regardless of jurisdiction. Warranties are disclaimed in full, with Ascent declining to guarantee the accuracy, completeness, timeliness, reliability, suitability or usefulness of any portion of the Site and placing the entire risk as to accuracy on the user. The limitation clause opens by stating that Ascent will not be liable for any loss caused by the user's reliance on information obtained through the Site, which is precisely the exposure this product creates. Indemnification runs one way only, from customer to vendor. There is no vendor indemnity of any kind, no warranty on output, and no insurance position. The History Views clause adds a further targeted disclaimer of all liability for the obligations history the platform presents. This is a C rather than a D because every limb of it is published and a buyer can read the whole allocation before signing.
Practice Systems Integration Depth
How deeply the product reaches into the systems legal work already lives in: document management such as iManage and NetDocuments, Word and Outlook, contract lifecycle management, matter management, e-billing, and court filing systems.
Integration is central to the product rather than decorative, and the direction of movement is described. The platform is marketed as integrating with leading GRC platforms so that obligations, policies and controls reflect current regulatory requirements, which states what actually moves: obligations flow out of the register into the policy and control records held elsewhere. Five GRC partners are named on the home page, MCO, LogicGate, Onspring, Resolver and Corestream, and a policy and control engine is described for automated change proliferation and end-to-end oversight within GRC. First-party announcements describe two further integrations with substance: Diligent's regulatory compliance management solution consuming Ascent's monitoring and interpretation so that obligations update automatically and alert the user to assess impact, and Halo Ai consuming Ascent's enriched regulatory data through named endpoints to surface obligations into its own workflow engine. What is missing is depth an implementer could work from: no public API reference, developer portal or integration documentation index was located on the site navigation on 1 September 2026, and the endpoints referenced in the Halo Ai announcement are not documented publicly.
Deployment Model and Data Residency
Where the software runs and where the data sits. Multi tenant cloud, single tenant, private deployment, on premises, and whether region of residence is a published option or an enterprise conversation.
Cloud delivery is implied throughout and neither the tenancy model nor a residency option is stated. There is a hosted application at app.ascentregtech.com and the terms describe Ascent hosting its Solutions as a backend service, but nothing located names a hosting provider, a data centre region, or whether customers receive a dedicated or shared environment. The only geography published sits in the privacy policy, recovered through search after the page would not fetch directly, which states that the company primarily stores data about customers in the United States and that to facilitate global operations it may transfer and access such information from around the world. That is a description of where data tends to sit rather than a residency commitment, it offers the customer no choice, and it is framed around personal data rather than the obligations inventories and policy mappings the platform holds. No processing location is addressed separately from storage. Checked the home page, the RLM Platform page, the security page, the terms of service and the privacy policy on 1 September 2026.
Security Certifications and Trust Center
Independent attestation a buyer can pull without a sales call: SOC 2, ISO 27001, penetration test summaries, a trust center with current reports and named scope rather than a badge image.
The attestation is real, named, and stated with a candour worth recording: AscentAI publishes that it maintains a SOC 2 **Type I** attestation, which is the design-at-a-point-in-time report rather than the Type II examination of operating effectiveness over a period that most vendors lead with. Naming the weaker of the two rather than blurring them is a disclosure choice in the buyer's favour. A trust centre exists at trust.ascentregtech.com and the security page states the attestation is available there, so a route to the report is published. The security programme is additionally described as aligned to the NIST Cybersecurity Framework, and the page is current, last modified April 2026. What holds this below the top band is that none of the confirming detail is on the readable surface: no auditor or certification body is named, no examination date or period appears, and no scope statement identifies which entities or systems the attestation covers. The trust centre itself was not opened on 1 September 2026, so whether its access flow is self-serve or sales-gated could not be established, and the lower tier was taken for that reason.
Model Supply Chain Disclosure
Which models sit underneath, whose they are, where they run, and whether the vendor commits to telling customers when that changes. A legal buyer inherits every dependency it cannot see.
The vendor refers to its own proprietary technology and identifies nothing underneath it. A 2022 first-party announcement describes patented AI and natural language processing technology, and the product pages refer throughout to AI-powered automation, AI-generated summaries and AI-driven impact assessment without naming a model, a model family, a provider, or an architecture. No statement identifies whether any third-party foundation model is called at any point, which is the question a financial services customer's own vendor risk process will ask about a system processing its obligations inventory. Where inference runs is not stated. No commitment to notify customers when the model set changes was located. Checked the home page, the RLM Platform page, the Compliance page, the security page and the terms of service on 1 September 2026. The dedicated page at /our-difference/ascentai/ could not be retrieved and is the surface most likely to carry this, so the grade is rebuttable on it; nothing has been graded against the vendor for that retrieval failure, since C rests on what the readable surfaces do say rather than on what could not be read.
Commercial Transparency
Whether a buyer can learn what this costs without entering a sales process: published rates, the unit being charged, what sits behind an enterprise tier, and what implementation adds.
No pricing information is published at any level, including the unit of charge. There is no pricing page and no pricing entry anywhere in the site navigation, which was read in full on 1 September 2026 and covers the platform, difference, buyer, partner, resource and company sections. Every commercial route on the property is a contact form or a request to talk. The terms of service confirm that a priced self-service route exists without publishing any part of it: a user signs up for a duration of their choice ranging from one month to three years and pays by credit card, with pricing terms and procedures deferred entirely to a separate Individual Service Agreement, and recurring ACH debit authorised against charges described in that agreement. The only figure published anywhere is a 25 dollar fee for a transaction returned for insufficient funds, which is a penalty rather than a price. Neither a rate, a band, a tier name, a per-seat or per-obligation unit, nor a statement of what implementation adds was located.
Firm and Practice Coverage
Who the product is actually built for. AmLaw, midlaw, small firm and solo, in house departments, government and courts, and which practice areas are supported rather than merely claimed.
Coverage is documented with real precision on two of the three dimensions and left open on the third. Segment coverage is unusually specific and is expressed as regulatory scope rather than as a logo wall: depository institutions including banks and credit unions, non-depository institutions covering mortgage services, consumer finance and fintech platforms, electronic payments and money services, then securities and commodities covering investment advisers, broker-dealers and funds, crypto and digital asset businesses, and market infrastructure including exchanges, clearing and settlement organisations and repositories. Practice coverage is named by regulatory topic across consumer protection, consumer privacy, anti-money laundering, counter-financial terrorism and ESG, against a stated 98 countries and 1,000 data sources. The boundary is implicit rather than stated: the coverage list makes clear this is a financial services product, but nothing states firm size, obligation volume, or where the product stops. The gap worth naming is the buyer: the Who We Serve section offers pages for Compliance, Risk and Digital Transformation and none for Legal, even though the platform page positions the product to legal teams and the rebrand announcement does the same.
Legal Signals
What each signal meansA signal records what public sources say on the date shown. It is not a grade and it is not a recommendation. Where a signal reads Not addressed, it means the index did not locate the material in public sources on that date, which is a statement about disclosure rather than about the product.
Client Data in Training
Can material a lawyer puts into this product be used to train a model?
No located term or policy addresses the question either way.
No located term or policy addresses the question either way. The terms of service govern the Site and the Solutions, run to roughly twenty sections covering warranties, liability, indemnification, service rules and payment, and contain no provision on the use of customer content for model training or improvement. The security page describes encryption, secret management and identity controls and is silent on it. No data processing agreement is published anywhere on the property. The nearest adjacent statement runs the other way and concerns a different subject: the terms provide that as between the parties the customer owns and retains all right, title and interest in its Account Information, which is a statement about ownership rather than about training use. Searched the terms of service, the security page, the privacy policy, the home page, the RLM Platform page and the Compliance page on 1 September 2026.
Prompt and Output Retention
How long does the product keep what a lawyer typed, and can that be set to zero?
No located public material states how long prompts and outputs are retained.
No located public material states how long customer inputs or generated outputs are retained, and no zero-retention or customer-configurable option is described. The privacy policy addresses website visitor data rather than platform content. One clause touches the subject obliquely and is worth recording because it cuts against the product's own audit-trail marketing: the History Views section of the terms provides that where new information changes Ascent's assessment of a customer's history of rules and documents, the prior history may not be accessible to the customer and may be replaced by an updated view. That describes a presentation policy rather than a retention window, and it means the record a customer sees is not guaranteed to persist unchanged. Searched the terms of service, the security page, the privacy policy and the platform pages on 1 September 2026.
Ethical Walls and Matter Segregation
Does retrieval respect the firm’s ethical walls, or can the model read across them?
Segregation is asserted in public materials with no published detail on how it is enforced.
A permission model is asserted and nowhere described. The Information Sharing section of the terms states that Ascent enables users with appropriate permissions to share access to their accounts, giving a law firm working on the customer's behalf as its worked example, and makes the customer responsible for the use and content of anyone they share access with. That establishes that per-user permissions exist and that cross-organisation sharing is a supported flow, without publishing anything about how the model is enforced, what granularity it operates at, or whether shared access can be scoped below the account. The role-based access controls described on the security page govern AscentAI employees rather than customer users. Nothing addresses walls or segregation between teams or matters inside a customer account, which is the question that matters given the sharing feature points outward to external advisers.
Third Party Request and Subpoena Notice
If someone subpoenas the vendor for a firm’s data, does the firm hear about it first?
No located term or policy addresses third party requests for customer data.
No commitment to notify the customer of a third-party request for their data was located, in the terms of service, the privacy policy or the security page. There is no confidentiality section in the terms in the usual sense, so the clause that ordinarily carries this obligation does not exist. One provision addresses disclosure to authorities and contains no notice undertaking: the terms state that user activity may be monitored, that users expressly consent to such monitoring, and that if monitoring reveals possible criminal activity security staff may provide the evidence to law enforcement officials. That is a disclosure route without a notice commitment attached, though it concerns monitoring of system use rather than a subpoena for customer content. No transparency report exists. Searched on 1 September 2026.
Primary Law Corpus Provenance
Where does the law in this product come from, and does the vendor have the right to use it?
Coverage is described by jurisdiction with no identification of the underlying corpus.
Coverage is quantified and geographic, and the underlying corpus is not identified. The home page states 98 countries, roughly 1,000 data sources and 400,000 obligations, and the platform page breaks coverage down by segment and by cross-segment regulatory topic including consumer protection, consumer privacy, anti-money laundering, counter-financial terrorism and ESG. None of the 1,000 sources is named, no regulator, publisher or feed is identified, and no licence or rights basis is stated for any of it. The terms confirm that third parties are involved without naming them, describing the Content as relating to and provided by Ascent Technologies Inc. and its third party content providers. No update cadence is published, although the product is marketed on near-real-time capture. Checked the home page, the RLM Platform page, the Compliance page and the terms of service on 1 September 2026.
Good Law Verification
Does the product tell you when the authority it just cited has been overruled?
The vendor computes and surfaces subsequent history itself, with the method described.
The regulatory analogue of a citator is a shipped feature here, which is unusual for this signal. Rule Compare presents the new and former versions of a rule side by side with the changes redlined, and the change management engine identifies in near real time when a rule the customer is tracking has moved and which of their obligations it affects, with auto-generated summaries of what changed. That is the vendor computing and surfacing subsequent history for its own corpus rather than licensing a treatment service, and the method is described at least at the level of what the user sees. Two limits belong on the record. The currency of the underlying corpus is asserted rather than evidenced, and the terms state that Content may not reflect the most current regulatory developments. And the History Views clause provides that a prior version of a customer's rule history may cease to be accessible and be replaced by an updated view, which weakens the historical trail the feature otherwise builds.
Refusal and Uncertainty Behaviour
What does the product do when the answer is not in the corpus?
No located public material addresses what the product does when it cannot ground an answer.
Nothing located describes what the system does when a question or a rule falls outside its scope, which is the decisive question the index editorial sets for this category. No abstention path, confidence score, coverage indicator or low-certainty flag is published for the applicability assessment or for the generated summaries, and no statement describes what a user sees when the platform cannot determine whether a change affects them. The terms answer the question contractually instead, telling the user that if their specific problem is too complex to be addressed by Ascent and its Solutions they should consult a Compliance Professional in their area. That places the escalation duty on the reader rather than describing a behaviour of the system, and it is the customer who must notice that the threshold has been crossed. Searched the home page, the RLM Platform page, the Compliance page, the security page and the terms on 1 September 2026.
Fabricated Citation Record
Does a public court record exist involving output from this product?
No court order, opinion or disciplinary record naming this product has been located as of the date shown. This is a statement about the public record, not a finding about the product.
Searched the AI Hallucination Cases database maintained by Damien Charlotin at HEC Paris, together with 2026 sanctions trackers and trade coverage, on 1 September 2026, on both the current brand AscentAI and the former corporate name Ascent Technologies. No court order, opinion or disciplinary record naming either was located. This is a statement about the public record rather than a finding about the product. The failure mode this signal tracks fits imperfectly, since the platform's output is a regulatory obligation assessment consumed inside a compliance function rather than a citation filed with a court, though the same underlying risk exists in a different forum: a fabricated or misattributed regulatory citation reaching an examiner rather than a judge.
Bar Guidance Alignment
Has the vendor engaged in public with the ethics opinions its buyers are bound by?
Public materials refer to professional responsibility in general terms without naming guidance.
Professional responsibility is engaged repeatedly and in substance, and no guidance is ever named. The terms state that Ascent is not a law firm, attorney and does not dispense legal advice, that no attorney-client relationship is created or implied, that any privileges related to such a relationship may only be formed between the customer and their own attorney, that Ascent is not a law or compliance firm and may not perform the services of a Compliance Professional, and that use of its forms is neither legal advice nor the practice of law. That is a fuller engagement with the professional line than most vendors in this pull publish. What is absent is any named source: no reference to ABA Formal Opinion 512, to any state bar opinion, or to regulator guidance on the use of AI in compliance functions was located on any surface read on 1 September 2026.
Billing and Fee Posture
Does the vendor address what happens to the bill when the work takes an hour instead of six?
Public materials claim time savings without addressing billing or disclosure.
Cost savings are claimed and no billing or disclosure treatment is addressed. The home page markets reduced costs through eliminating manual processes, and the Compliance page states that automation reduces the need for incremental full-time employees and outside services to monitor and act on regulatory change. That is a headcount and outside-spend saving aimed at an in-house compliance function rather than an hours claim aimed at a firm billing a client, so the fee-disclosure question this signal was written for lands differently in this category. Nothing published addresses how AI-assisted regulatory analysis should be disclosed where the work is performed by an adviser and billed on, which is a live question given the terms expressly contemplate a law firm being granted shared access to a customer's account. No per-matter record of AI-assisted work is described.
Outside Counsel Guideline Readiness
Can a firm get this vendor through a client’s AI clause without a bespoke negotiation?
No located public material supports a client side disclosure obligation.
Nothing that would support a client-side disclosure obligation was located. No subprocessor list is published anywhere on the property. No model provider is identified, and the AI is described only as Ascent's own patented artificial intelligence and natural language processing, so a customer cannot say whether any third-party model sees its content. No data processing agreement, consent pack or client-facing disclosure material exists, and no route to request any of it was found beyond a general contact form. The terms disclose that third party content providers exist without naming them. The trust centre at trust.ascentregtech.com is stated to carry the SOC 2 attestation and was not opened, so it is possible a subprocessor register sits there; on the surfaces read there is nothing. Searched the terms of service, the security page, the privacy policy and the full site navigation on 1 September 2026.
Court Disclosure Support
If a judge’s standing order requires an AI disclosure, can the product produce one?
Some elements of the record are available, short of a document level export.
Part of the record exists and it was built for a different forum. The platform markets comprehensive audit trails with automatic tracking of every activity, end-to-end traceability for audit readiness, and support for documentation to prepare for regulatory audits and examinations, so a customer can evidence what was reviewed, when, and by whom. That is a real and exportable-sounding activity record, and in this category the relevant tribunal is an examiner rather than a judge. What it does not do is identify the AI's contribution: nothing states that the record captures which assessments or summaries were machine-generated, what corpus they drew on, or who verified them, so a user could not produce an AI-use disclosure from it. The History Views clause cuts against it further, providing that a prior history may become inaccessible and be replaced by an updated view.