Runback gives risk and platform teams a system of record for every agent decision — reproduce any incident, gate every release against policy, and keep the evidence. None of it has to leave your perimeter.
Observability platforms show you a trace. They can't re-run the decision, can't block a release, and can't hand your auditor a reproducible record. That combination — fidelity, control, and evidence, framework-agnostic — is the part that's hard to copy.
Agent traces carry your prompts, your customer data, and your IP. Nothing about getting governance should force that out of your control.
Runback is a Next.js app and a Postgres database. Run the whole thing inside your own cloud — traces are written to a store you own and never touch our servers.
Keys, tokens, emails, card numbers, SSNs — scrubbed inside your application process, before a trace is sent anywhere. Even your own backend never sees them.
Point Runback at Postgres you control. You set retention, you set access, you delete a run and it's gone. No third-party copy of your evidence.
Open-source SDK, OpenTelemetry ingest, a documented flat event schema. Your audit history is yours to export and keep.
Runback produces the observability, reproducibility, and audit records these regimes expect of AI systems. It supports your controls — it is not, by itself, a compliance certificate.
Operational risk, continuous monitoring, and incident management for critical operations — now including the agents inside them.
Logging, traceability, record-keeping, and human-oversight duties for higher-risk AI systems.
Validation, ongoing monitoring, and a defensible record of how a model-driven decision was reached.
We'd rather you trust the list than be surprised in a security review.
Self-host with the open-source code and redaction on from day one. Tell us which controls gate your rollout and we'll prioritize with you.