System of record for AI agents

Stop hoping your agents behave. Prove it.

Reproduce any agent failure in minutes. Gate every release against real production behaviour. Keep a tamper-evident record your auditor can verify independently.

loan-approval-agent · 2:47 AM · root cause in 4m 23s not 3h 48m walk it →

support-refund-agentrun
agent reasons over the disputegpt-4o
lookup_customergold tier
decide → issue_refund $250gpt-4o
policy breach — disputed, no escalationblocked
Every decision your agents make — captured.
4m 23sroot cause vs 3h 48m without
0 bytesPII leaves your process
Open formatverify without Runback — no account
Self-hostdata never leaves your perimeter

Built for teams where a wrong decision matters.

Early-stage AI team

Replay the exact decision from captured context. Every incident becomes a permanent regression test in one click.

Get started free →
Banks & financial institutions

Every decision sealed in a tamper-evident chain. APRA CPS 230, EU AI Act Art. 12, NIST AI RMF — one record covers all three. Self-hosted in your own VPC.

Enterprise & compliance →
Law firms & professional services

Every AI session captured and sealed. Replay the exact session for court or regulator. Policy gates flag high-risk outputs before they reach the lawyer.

Governance for legal →
Safety-critical deployments

Policy gates run before the call — the block is sealed into the tamper-evident record. No wrong decision executes unchecked.

How it works →
What Runback does

Observe. Replay. Gate. Audit.

01

Observe

Every model call — context, tools, tokens — captured at the boundary. PII redacted in-process before anything leaves your app.

Capture →
02

Replay

Re-run from the exact captured context — tools, retrieval, messages[] held fixed. A different output means behaviour changed. Root cause in minutes, not a war room.

Walk the demo →
03

Gate

Simulate a policy against 90 days of decisions. Enforce it live — block the violating action before it runs.

Policy gates →
04

Audit

SHA-256 hash-chained, HMAC-signed record. Tamper-evident. The artifact your compliance team actually asks for.

Enterprise →

Why these compound into a structural advantage →

Audit & Governance

Signed. Chained. Provable.

In software, the commit is the fundamental unit — immutable, attributed, tamper-evident. AI agent decisions have had no equivalent. The Runback cassette is that primitive: every decision sealed in a hash-chained record you can verify without us, move off-platform, and produce on demand to any auditor.

  • EU AI Act Art. 12 mandatory logging
  • Exportable audit artifacts for security reviews
  • HMAC-SHA256 dual-chain signature
  • Verify without Runback — open verifier, no account
$schemarunback.audit/v1
run_idloan-approval-agent
events6 · chained
content_digest3e68cdbbf372df98…
signatureHMAC-SHA256 ✓ signed
POST to /api/audit/verify to recompute the chain.
Plugs into what you already run

Three lines. Any stack.

Not a new platform to migrate onto — Runback wraps the model calls your agents already make. Add it to one agent today, in your existing pipeline, and it's live from the next request.

LLM providers
OpenAI
Anthropic
Gemini
Meta / Llama
Mistral AI
Hugging Face
Agent frameworks
Vercel AI SDK
LangChain
CrewAI
Ollama
OpenTelemetry
Languages
Python
TypeScript
import { withDebugger } from "@runback/sdk";

const dbg = withDebugger(model, { runName: "support-agent", redact: "standard" });
const res = await generateText({ model: dbg.model, tools: dbg.tools(myTools), prompt: task });
await dbg.finish({ output: res.text, status: "success" });
SDKDeepest capture — context, tool calls, token-level detail
ProxyNo code changes — swap your base URL
OTelAlready sending traces? Runback consumes them natively
Full data flow →
Already using LangSmith or Langfuse?

Observation shows the symptom. Re-execution finds the cause.

Observability tools were built for deterministic systems — software runs the same way twice, so a trace is enough to understand what happened. AI agents don't. Every decision is a function of a context assembled at runtime: retrieved documents, tool outputs, the exact messages[] array the model saw. A log records the outcome. Only a re-executable run shows you the reasoning.

Swipe to see all columns →

LangSmith · Langfuse
Runback
Read the trace after the fact
Re-run from the exact captured context
CI release gate — block regressions before deploy
Signed, tamper-evident audit export
Self-host, data never leaves your perimeter
partial
Regulatory controls (EU AI Act · CPS 230 · NIST)

Verified July 2026 — reviewed quarterly.

The product

Incident to proof — in one platform.

runback.dev/app/runs
Alert fires. Every run captured automatically.
Root cause — highlighted, not hunted.
Re-run from the exact captured context.
Simulate 90 days of decisions. Ship with confidence.
live · computed nowRegulatory dashboard · 1,241 runs analysed
EU AI Act · Art. 12
Mandatory logging & traceability
✓ covered
APRA CPS 230
Operational incident recording
✓ covered
NIST AI RMF
Govern · Map · Measure · Manage
✓ covered
ISO/IEC 42001
AI management system
Enterprise
Export signed audit artifact — verifiable without Runback →
Alert fires. Every run captured automatically.
ERROR runs surface instantly. Open any run to see exactly what happened — no log hunting.
Live

Real runs, right now.

Open one and walk through it yourself — no signup.

One record. Every decision. Provable.

Start free and self-host in minutes — or book a call and we'll walk through it live in your environment.