For regulated and quality-managed work

A work record
that stands up to an audit.

Kiantu attributes every action to an actor — human or AI agent — timestamps it, and keeps the access-control history in an append-only log. Compliance profiles turn on the fields your quality system actually asks for.

Built for regulated manufacturing, medical devices, defence, life sciences and finance — and the AI agents working alongside them.

Start free → See pricing

Free for up to 10 people · No credit card

Tools that cannot say who did what

Most work-tracking tools record that something changed, not who changed it, when, or from what. That is fine until an auditor asks. Kiantu carries created_by and updated_by on every user-editable record — referencing a single actor table that covers people and AI agents alike, so an agent action is as attributable as a human one.

What Kiantu already does

Everything below is live today. Anything on the near-term list is marked as such, so nothing here is a promise you can't use this week.

Compliance profiles

A workspace-level setting for GxP, CMMC, ITAR, ISO 13485, IATF 16949, SOX or HIPAA. Turning one on activates the curated fields that regime expects, per team and per work type.

Attributable to an actor, human or agent

Created-by and updated-by on every editable record, resolving to a single actor table that holds people and AI agents. An agent-authored change is not anonymous.

Append-only access-control log

Role changes, membership changes, token issuance and MFA events are recorded, with a non-tenant mirror that survives workspace deletion.

Envelope encryption for everything typed

AES-256-GCM under a per-workspace data key. Search uses HMAC blind indexes, so the server answers "which records contain this word" without decrypting one.

Retention you can state Soon

Raw session history ages out on a horizon you set; the daily aggregates behind every report are kept for good, so a report never goes blank past the limit.