A digital assembly line for regulated campaign delivery.
Six surfaces, one artefact graph. Every action writes one row to the cryptographic ledger. Every export into Salesforce or Adobe leaves a chain of custody that travels. The moat is the composition not any single feature.
Outputs · what leaves the system
Evidence Pack™
PS4Regulator-ready · signed · <1 min
Integrations
PS7Native SFMC · Adobe next · stack-neutral
Processing · what examines and gates
Policy Engine
PS2Compliance-as-code · draft-time
Judge Agents
PS3Adversarial QA · findings as nodes
ChatOps
PS8Slack · human-in-loop · MCP
System of record · PS1 the moat primitive
Artefact Graph
Write-once · append-only · open JSON-LD spec · cryptographic hash chain with daily Merkle-root checkpoints. Every object is a versioned node; every transformation is a signed edge.
Six surfaces · one artefact graph. The moat is the composition not any single feature.
How it works
Idea → Brief → Journey → Compliance → Evidence Pack.
Every stage writes one row to the ledger. Every artefact carries its lineage. Every export into Salesforce, Adobe, or HubSpot leaves a chain of custody that travels.
Stage 01
Intake → Brief
BriefSpec.jsonStructured, versioned
Stage 02
Segmentation
SegmentPlan.nodeFirst-party bound
Stage 03
Journey
JourneySpec.jsonNode-based, policy-gated
Stage 04
Creative
Variant.v3C2PA + lineage
Stage 05
QA + Policy
Judge.passEU Art.50 · NY A8887-B · FINRA 2210
Stage 06
Approvals
Approve.sigHuman-in-loop · Copilot default
Stage 07
Activation
Export → SFMCNative objects
Stage 08
Evidence Pack
pack.v1.pdfSigned, regulator-ready
Cryptographic ledger
SHA-256 hash chain · S3 Object Lock daily checkpoint
Stage-gated (Copilot default)
Explicit human approval before advance. Autopilot deferred to 2027+.
Evidence Pack
Versions · approvers · disclosures · models · logs
The platform
Six surfaces, one artefact graph.
Each surface is a deep page. The platform is what happens when they compose.
Surface 01 · PS1 the moat primitive
Artefact Graph
Versioned, signed, cross-vendor the system of record for every campaign object.
- Versioned by default. Every artefact is immutable once written. Edits create a new version; the prior version is preserved with its full provenance.
- Provenance on every node. Source documents, timestamps, originating user, model invocations, policy-pack version. Recoverable in one query.
- Cross-vendor stitching. Adobe Content Credentials are ingested as first-class C2PA nodes. Non-C2PA assets from Canva, Figma, and external agencies are signed into the chain on intake.
Surface 02 · PS2 compliance-as-code
Policy Engine
Compliance-as-code for every live jurisdiction enforced at draft time.
- Compliance-as-code packs. At MVP: EU AI Act Article 50, NY A8887-B, FINRA 2210. On the dated roadmap through Q3 2027: SEC Marketing Rule, Utah AIPA, Texas TRAIGA, India SGI, IAB Jan-2026. Each pack named, versioned, changelogged, signed by vendor + AmLaw co-author attribution.
- In co-authorship, not commodity. Each vertical pack is exclusive-per-vertical with a top-tier advertising-law partner (Davis+Gilbert / Reed Smith / Venable class for FS). The firm carries the regulatory interpretation; we carry the engineering.
- Cited at the point of fire. Every rule-fire returns the rule code, the prose explanation, and a link back to the authoritative regulator text. No 'trust-us this is a rule.'
Surface 03 · PS3 adversarial QA
Judge Agents Adversarial QA
Adversarial QA in the pipeline prompt injection, claim substantiation, IP, bias, drift.
- Prompt-injection detection. Heuristic + LLM-based scoring against tenant-uploaded brief content and campaign descriptions. 'Ignore all prior policy' style strings get flagged at intake.
- Claim substantiation against first-party data. Performance claims resolve to a version-locked warehouse query with a snapshot. Un-substantiated numeric claims block at the artefact gate.
- IP + bias scrutiny. Input-risk checks (unlawful data scraping) and output-risk checks (content infringing existing copyrights). Targeting and pricing logic tested for discriminatory bias against protected groups.
Surface 04 · PS4 the purchase-criterion feature
Evidence Pack
The artefact you hand a regulator. Assembled in seconds, signed by default.
- One-click assembly. Versions · approvers · disclosures · model traces · pack versions · activation logs. Composed in under a minute for campaigns with up to 500 artefact nodes.
- Cryptographic signature. ECDSA P-384 over canonical JSON-LD. Signing key in AWS KMS, FIPS 140-2 backed, in a dedicated AWS account with least-blast-radius access.
- Hash-chained ledger source-of-truth. Every action serialises as a canonical event with SHA-256 hash chained to the prior event. Daily Merkle-root checkpoints into S3 Object Lock tamper evidence even against full-rights DB admins.
Surface 05 · PS8 one brain, many channels
ChatOps Control Plane
Approve, diff, and triage from your phone without opening a laptop.
- Approval DMs with diff + one-tap. Marcus approves a paused campaign from a conference. Priya rejects a misconfigured journey from a hallway. The signed approval enters the ledger before the Slack message disappears.
- /compliance why <artefact-id>. Priya asks 'why did this campaign trigger NY A8887-B?' from her phone at 9 p.m. and gets a structured answer citing the policy rule and the artefact's offending element.
- Anomaly alerts to channel. Spend spikes, brand-safety flags, export failures, policy-fire storms pushed to the designated channel with a one-tap acknowledge action.
Surface 06 · PS7 stack-neutral export bundle
Integrations
Native into Salesforce and Adobe. Ingest from Canva, Figma, Workfront, agencies. Bind it all.
- Salesforce Marketing Cloud native. MVP exporter ships native audiences (Data Extensions), content (Content Builder), and journeys (Journey Builder activities). One-way push at MVP, bidirectional sync post-MVP. ISV listing on the Salesforce AppExchange by FY27.
- Adobe GenStudio + Content Credentials (C2PA). Post-MVP exporter via the Adobe GenStudio API. Native C2PA emission so Adobe-originated assets keep their authenticity metadata while joining the cross-vendor chain.
- HubSpot · ad platforms · DAMs. Year-2 exporters for HubSpot Marketing Hub, Meta / Google / TikTok / LinkedIn ad consoles, and DAM platforms (Bynder, Frontify, Adobe AEM Assets).
Enterprise-grade
Security, privacy, and model governance by construction.
Every procurement gate the CISO, CCO, and Risk Committee expect on a dated roadmap. Data stays in-region. Keys stay in Vault. Models stay in the registry.
SOC 2 Type I → Type II
Type I at design-partner signature; Type II by Q1 2027.
EU data residency
Dublin-region tenant; DPA + SCCs pre-shipped.
SSO · SCIM · RBAC/ABAC
Creator / Approver / Admin / Viewer separation.
Shared-responsibility clause
Contractual first-loss absorption on covered packs.
Cryptographic audit trail
Write-once · hash-chained · Merkle checkpoint.
Model registry + trace
Tenant-scoped approved models; per-artefact trace.
Partner posture · diligence-ready
AmLaw-50 advertising-law partner
Exclusive-per-vertical co-authorship of FS policy packs. Engagement live; named on contract for design partners.
Chubb / AIG / Beazley-class underwriter
Cyber-insurer for the shared-responsibility rider. Underwriting terms finalising alongside design-partner pilots.
C2PA · IAB Tech Lab working groups
Evidence Pack format contributed as open JSON-LD. Goal is recognition as standard, not assertion.
EU AI Act Article 50
Twenty minutes. One conversation. If the outside-counsel-displacement math works, we keep talking. If it doesn't, it's honest and short.