Safe Creative Launches External Event Logging Service to Meet Stringent AI and Cybersecurity Compliance (DORA, NIS2, CRA, and AI Act)
The new solution enables organizations and developers to certify technical events with eIDAS-qualified timestamps, delivering independent legal evidentiary value with zero-knowledge data privacy.
Zaragoza (Spain), October 19 — Driven by increasingly stringent global and European regulatory frameworks regarding technical audit trails, incident disclosures, and operation logs, Safe Creative —an established digital trust service operating since 2007— has announced the launch of its external event logging and certification service.
The solution addresses a critical challenge for IT, cybersecurity, and compliance teams: generating tamper-proof, independently verifiable evidence suitable for regulators, auditors, and court proceedings, kept entirely separate from the organization’s internal infrastructure.
Verifiable Logging for Real-World Regulatory Deadlines
Technical event logging has transitioned from an internal IT hygiene practice into a binding legal obligation across several regulatory frameworks:
- EU AI Act (Art. 12): Mandates automated event logging for high-risk AI systems (enforceable starting December 2, 2027, for Annex III systems).
- Cyber Resilience Act (CRA) & NIS2 Directive: Effective September 11, 2026, the CRA requires manufacturers of products with digital elements to notify authorities of exploited vulnerabilities and severe incidents within strict 24-hour and 72-hour windows. Similarly, NIS2 mandates end-to-end traceability and reporting of significant security incidents.
- DORA (Digital Operational Resilience Act): Mandates strict technical controls for the financial sector, including tamper-resistant logs of ICT changes and operations protected against unauthorized alteration or deletion.
- Audits and Global Compliance (SOC 2, ISO 27001, and SEC): Supplies objective, independent evidence for audit controls. For SEC-registered issuers, it provides an auditable paper trail to satisfy Form 8-K material incident reporting, typically required within four business days of materiality determination.
Legal Evidentiary Value: Why Third-Party Certification Matters
Internal server logs remain vulnerable to accusations of tampering, retroactive manipulation, or administrative overrides. Safe Creative provides legal certainty through established statutory frameworks:
- eIDAS Regulation (Art. 41.2): Qualified electronic time stamps enjoy the legal presumption of accuracy regarding the date, time, and data integrity across all EU Member States.
- Procedural Presumption (e.g., Spanish Civil Procedure Law, Art. 326.4): Strengthens judicial recognition when verified through qualified trust services.
Safe Creative acts as an independent custodian separated from client systems, while qualified electronic time stamps are generated by an accredited eIDAS trust service provider.
Simple Integration: Declare the Event, Retain Full Control
The service accommodates demanding security and data protection requirements through two distinct integration modes:
- Full Content Mode: The organization submits the log data or file directly for encrypted custody within Safe Creative’s repository.
- Hash-Only Mode (Zero-Knowledge): The organization submits only the cryptographic hash of the event. Sensitive logs, customer data, and source code never leave internal infrastructure, maintaining strict privacy while preserving full evidentiary weight.
Organizations can generate a cryptographically signed, verifiable audit report for any registered timeframe on demand.
Transparent Model: Pay-As-You-Go, No Subscriptions
The platform avoids complex licensing tiers, long-term contracts, or recurring lock-ins:
- Consumption-Based: 1 credit per logged event.
- Free Sandbox Testing: Access to complimentary test API keys that do not consume credits.
- Public Technical Documentation: Standardized REST endpoints designed for fast integration into SIEM tools, CI/CD pipelines, and internal logging engines.
Public technical documentation and sandbox access are now available on Safe Creative’s official platform.
