EU AI Act Article 12 enforceable / Day 016 of a 6-month retention window / Penalty €15M or 3% of global turnover

Developers

Three endpoints, one connector, one extension.

Deployment is a configuration task, not an integration project. Nothing about your model choice, prompt stack or agent framework has to change.

REST

Record an interaction from anything you build.

Encryption happens in the client SDK before the request is formed. The payload below is already ciphertext by the time it reaches us.

POST /v1/recordspython
from clspp import Client

client = Client(tenant="acme-eu", region="eu-west-1")

# Encrypted client-side; the service receives ciphertext only.
client.record(
    actor    = "a.mehta@acme.com",
    surface  = "chatgpt.com",
    model    = "gpt-5.2",
    prompt   = prompt_text,
    response = response_text,
    labels   = ["credit-ops", "customer-data"],
)

# → {"id": "rec_8f21c0", "chain": "e7c1a9", "region": "eu-west-1"}

Model Context Protocol

Register once, and agent activity lands in the same ledger.

Works in Claude Desktop, Cursor and Cline. Tool calls, results and the context an agent retrieves are all recorded as entries.

~/.config/claude/mcp.jsonjson
{
  "mcpServers": {
    "clspp": {
      "command": "npx",
      "args": ["-y", "@clspp/mcp"],
      "env": {
        "CLSPP_TENANT": "acme-eu",
        "CLSPP_REGION": "eu-west-1"
      }
    }
  }
}

Rollout

Managed deployment, no user action.

STEP 01

Push the extension

Force-install by Chrome or Edge group policy, or through Intune and Jamf. Users see a status indicator and nothing else.

ExtensionInstallForcelist · MV3
STEP 02

Bind key custody

Point CLS++ at your own KMS or HSM so key material never depends on us. Ten minutes with your platform team.

AWS KMS · Azure Key Vault · HSM
STEP 03

Pin the region

Nominate the jurisdiction per tenant. Every subsequent export carries the residency attestation with it.

30+ regions