Questions
Proving IP and compliance for diligence
What an investor can actually verify, what the agent does and does not upload, and what happens to your proof if immut is no longer here.
About immut
What is immut?
immut is the independent digital witness for digital files. It sits underneath your existing compliance tools and creates permanent, independently verifiable, court-ready proof of when a file existed, so your business stays trusted under challenge.
Is the proof accepted as legal evidence?
immut certificates are accepted as legal evidence in 88 countries and 171 jurisdictions. Independent verification does not depend on trusting your systems alone.
How does immut create proof?
You provide a file through the product, API, or integration. immut creates permanent proof of that exact content at that moment and returns a court-ready certificate. An optional API and agent mode can create proofs from a fingerprint only.
Does immut replace Vanta or Drata?
No. immut is the proof layer that sits underneath your existing compliance tools. Vanta and Drata collect your evidence. immut proves when that evidence existed. They complement each other.
Which compliance standards does immut support?
immut produces records that satisfy evidence requirements in ISO 27001, ISO 9001, ISO 14001, ISO 45001, SOC 2, GDPR, HMRC R&D, HSE health and safety, KYC/AML, EU AI Act, HIPAA, and more. Any standard that requires dated, tamper-evident records is supported.
What happens if immut shuts down?
Every certificate already issued remains independently verifiable. The proof does not depend on immut existing. A regulator, a judge, or opposing counsel can verify your certificate at any time, with or without immut.
Agents and fundraising
How does this help with a fundraise?
It de-risks the investment decision for the VC. Diligence asks not only what you built, but whether your IP and compliance records can be trusted on date and integrity. Your agent builds a living trail of permanent, independently verifiable proof while you ship, so the data room is harder to attack and easier to believe.
What do VCs actually get to verify?
Anyone with the transaction reference and the original file can verify that the file existed, unchanged, at a precise time. Verification is public and needs no immut account. Each proof can include a court-ready certificate PDF you store next to the file or in the data room.
Does the agent upload my code or pitch deck?
The public agent skill stores selected files on immut after you agree the scope (so you have custody and organised folders for diligence). Classification runs on your machine first. There is also a hash-only CLI and API path for custom integrations that must not upload bytes. Keys never include billing access.
What should the agent prove for fundraising?
Two lanes. IP: designs, code snapshots, research notes, technical narratives, and materials you share with investors. Compliance: policies, SOPs, risk assessments, security packs, access reviews, and other records whose timing may be questioned in diligence. Agree the objective, folders, keywords, and finalisation triggers with the agent up front. Start with immut dry-run if you want to test without uploading.
Is the proof permanent if immut disappears?
Yes. The proof is permanent and independent of immut. Verification needs the transaction reference and the original file (and for salted hash-only proofs, the nonce). Stored files also remain available on immut for entitled users while the product is available. The independent proof outlives immut.
How does a founder get started in under a day?
Install the skill with npx skills add enroh-ops/immut-agent, run immut dry-run for the short setup (objective, accept immut folders, connect AI tools, entire project default, optional always-protect folder, new-file cadence), then go live with an API key that includes document and folder scopes. Full how-to: github.com/enroh-ops/immut-agent.
What if we do not run AI agents yet?
Then we build and maintain the agent for you. The skill is free and open source if you already run Claude, Cursor, ChatGPT, or similar. If you do not, a managed agent covers the setup: objective, folder structure, connectors on your host, a dry run you approve, then go live. Optional monthly management keeps it deciding for you as connectors break and scope changes. Pricing is a one-time implementation, optional monthly management, and your immut subscription.
Can the proof be used as legal evidence?
Independently verifiable proof of existence and integrity is accepted as legal evidence in 88 countries and 171 jurisdictions, including US federal court (US v. Sterlingov, 2024) and the EU under eIDAS-2. Each proof comes with a court-ready certificate PDF.
Still deciding? The agent page walks through what it protects and how you keep control.
See the AI agent