Now available: Early Access for law firms

Did you use AI
on this matter?
Prove it.

Anchor BlackBox™ is the governance recorder for AI-assisted legal work. The only system that can reconstruct, in court, exactly how your firm used AI. Every prompt. Every version. Every approval. Every chain intact.

Built on
Cloudflare Workers HIPAA BAA (D1 + R2) Zero-knowledge anonymization Heppner-compliant (S.D.N.Y. 2026) Ed25519 tamper-evident ledger
The Anchor BlackBox™ Courtroom

Twenty seconds that explain everything.

🟧
The Anchor BlackBox™ Courtroom
Motion granted. Demo coming soon.
The Anchor BlackBox™ Recorder

Built for the courtroom.
Deployed in the cloud.

Every AI session your firm runs is captured, timestamped, and sealed inside Anchor BlackBox™. When opposing counsel asks what your AI did, you open it. Tamper-evident. Heppner-ready. No dark rooms.

Anchor BlackBox™ recorder unit
The Governing Precedent

February 2026
changed the question.

A federal court just issued a three-prong test for whether AI-assisted legal work is defensible. Your firm either passes all three, or it does not. There is no partial credit.

United States v. Heppner · S.D.N.Y. · Feb. 17, 2026

The Heppner Three-Prong Test

The first federal framework requiring structural, not contractual, privacy controls for AI-assisted legal work. Prior art fails by design. Anchor BlackBox™ satisfies all three.

Anchor ✓
1

Client Authorization

The client must have affirmatively authorized AI use on the matter. Anchor BlackBox™ records and time-stamps the authorization event in AIDR.

Anchor ✓
2

Structural Anonymization

Client identity must never be transmitted to the AI provider: structurally, not contractually. Anchor's BlackBox anonymization layer is the only architecture that satisfies Prong 2. Prior AI tools fail here by design.

Anchor ✓
3

Complete Contemporaneous Record

A verifiable, producible record must exist on demand. AIDR + CAIR together constitute the only complete contemporaneous record in the market.

The decisive distinction: Signing an AI provider's Data Processing Agreement satisfies zero of the three prongs. A BAA satisfies zero. Only a system that is structurally incapable of transmitting client identity, and that contemporaneously records every interaction, can satisfy Heppner. Anchor BlackBox™ is that system.


The Anchor BlackBox™ Architecture

Two recorders.
One complete record.

Every commercial aircraft carries two recorders: the Flight Data Recorder and the Cockpit Voice Recorder. Together, they reconstruct everything. Anchor BlackBox™ uses the same architecture for AI-assisted legal work.

Recorder 1

AIDR™

AI Data Recorder

Records the facts of every AI interaction: the data layer equivalent of a Flight Data Recorder. AIDR answers what happened at the infrastructure level.

  • Matter, user, model, and version logged at session open
  • Client authorization event, time-stamped and signed
  • Routing decision and anonymization log
  • Governance events: competence acknowledgments, approvals, flags
  • Four-version audit log per interaction (original, anonymized-sent, anonymized-received, re-injected final)
  • Chain Score computed and written at session close
✈ FDR Analogy Records altitude, speed, heading: the instrument data.
Recorder 2

CAIR™

Conversation AI Recorder

Records every prompt, every output, every correction, and every governance flag: the conversation layer equivalent of a Cockpit Voice Recorder. CAIR enables Governance Replay™.

  • Every prompt, original and anonymized, Version 1 and Version 2
  • Every AI output, anonymized received and re-injected, Version 3 and Version 4
  • Human corrections, attorney-added notes, and override events
  • Every hallucination flag and authority verification result
  • Governance Replay™: full session reconstruction on demand
  • Privilege Data detection log: law firm names, case numbers, opposing counsel, trade secrets
✈ CVR Analogy Records every word spoken in the cockpit: the conversation record.

AIDR™ Four-Version Audit Log: Every Interaction

Version 1
Original Prompt

Contains all client identifiers. Never transmitted. AIDR-only storage. Attorney eyes only.

Version 2
Anonymized Sent

Deterministic tokens replace all PHI, PII, and Privilege Data. Transmitted to LLM API. Zero client identity exposed.

Version 3
Anonymized Received

Raw LLM output with tokenized placeholders intact. Recorded before re-injection. Immutable.

Version 4
Re-Injected Final

Client identifiers restored via Anonymization State Key. Delivered to attorney. Signed and timestamped.


Anchor BlackBox™ Framework

Chain of Legal Custody™

Just as eDiscovery created chain of custody for evidence, Anchor BlackBox™ creates Chain of Legal Custody™ for AI-assisted work product. Six chains. One unbroken record.

🤖

AI Chain

Which model, which version, which API endpoint, which inference parameters were used on each request.

Recorded by AIDR™
👤

Human Chain

Which attorney made which request, applied which correction, and provided which approval at each step.

Recorded by CAIR™
📄

Document Chain

Every version of every document the AI touched: input, intermediate, and final, with diff-level provenance.

Recorded by CAIR™
📬

Delivery Chain

How and when each AI-assisted work product was delivered to the client, with delivery confirmation and receipt log.

Recorded by AIDR™

Approval Chain

Every governance checkpoint: competence acknowledgment, supervision sign-off, client authorization event, final release.

Recorded by AIDR™ + CAIR™

Chronology

RFC3161 timestamps on every event. Merkle root computed at session close. Immutable. Court-producible on demand.

Tamper-Evident Ledger

Anchor BlackBox™ Risk Intelligence

Your Chain Score™.

Every AI-assisted work product in your firm gets a Chain Score™, computed automatically at session close. Green. Yellow. Red. You always know exactly where you stand.

Green

Verified

All six chains intact. AIDR™ and CAIR™ records complete and consistent. Heppner-compliant. Court-producible. This is where every matter should land.

Yellow

Partial

One or more chains are degraded: missing a timestamp, a version, or a supervision event. Requires attorney review before the matter can be considered defensible.

Red

Orphan

No AIDR™ or CAIR™ records. The document exists in the system with no traceable provenance. Maximum malpractice exposure. The absence of evidence is itself evidence.

"An Orphan Work Product classification is not a metadata flag. In the context of a Heppner-style challenge, a document with no provenance chain is a document you cannot defend. It represents the complete absence of the record a court can demand."

Anchor BlackBox™. Chain Score™ Technical Specification
The Questions Are Already Changing

Today's questions won't be about whether you used AI.

Yesterday's questions

Did you use AI on this matter?
Is your firm using ChatGPT?
What's your AI policy?

Today's questions

Can you reconstruct every AI interaction on this matter?
Was client identity ever exposed to the AI provider?
Where is the contemporaneous record? Produce it now.
What is the Chain Score™ on this work product?

"When a partner asks 'Did you use AI on this matter?' You need more than a yes. You need the recorder."

Anchor BlackBox™: The Black Box Recorder for AI-Assisted Legal Work™

What Anchor BlackBox™ Is Not

Not a monitoring tool.
The governance layer.

Anchor BlackBox™ is not a citation checker, a hallucination detector, or an AI assistant. It is the governance infrastructure that makes every AI tool your firm already uses legally defensible.

✗ Not a citation checker ✗ Not a monitoring tool ✗ Not an AI assistant ✗ Not a BAA substitute ✓ The governance recorder ✓ The Heppner compliance layer ✓ The Chain of Legal Custody™ system ✓ Works with any AI tool your firm already uses
Competitive Differentiation

How Anchor BlackBox™
stands alone.

Every other AI tool in legal focuses on what AI can do. Anchor BlackBox™ focuses on what your firm can prove.

Capability Anchor BlackBox™ anchorblackbox.com General AI Assistants
(Harvey, GPT, Claude, etc.)
AI Governance Tools
(logging, monitoring)
Heppner Prong 2 structural compliance ✓ By architecture ✗ Fails by design ✗ Fails by design
Client identity never transmitted to LLM ✓ Zero-trust BlackBox layer ✗ Transmitted in every prompt ✗ Not addressed
AIDR™ dual-recorder architecture ✓ AIDR + CAIR ✗ No recorder ~ Logging only
Four-version audit log per interaction ✓ V1–V4 per session
Chain of Legal Custody™ (6 chains) ✓ Computed automatically
Chain Score™ (Green / Yellow / Red) ✓ Per work product
Orphan Work Product detection ✓ Automatic classification ~ Manual audit only
Privilege Data as discrete detection category ✓ Third category (PHI + PII + Privilege)
Tamper-evident ledger (Ed25519 + RFC3161) ✓ Court-producible ~ Varies
Kovel Documentation Package, one click ✓ Four documents auto-generated
Works with any AI tool the firm uses ✓ Provider-agnostic ✗ Single-vendor ~ Limited

Enterprise-Grade Infrastructure

Built for the security
posture your clients expect.

Anchor BlackBox™ runs on Cloudflare's zero-trust infrastructure. Every control is documented. Every configuration is auditable. Your IT team will recognize every component.

🛡

HIPAA BAA

Cloudflare D1 + R2 with signed Business Associate Agreement. WORM storage for healthcare matters.

🔒

mTLS + CF Access

Mutual TLS on every endpoint. Cloudflare Access JWT on all protected routes. No public surfaces.

🧩

V8 Isolate Sandbox

Each firm runs in a complete V8 isolate. No cross-tenant data access. No shared memory.

🔑

AES-256-GCM at Rest

Application-layer encryption before every D1 write. AWS KMS or HashiCorp Vault key management.

🌐

R2 Jurisdictional Locks

Data residency enforcement at the storage layer. EU, US, and APAC jurisdictions supported.

📊

Logpush (45 CFR 164.312)

HIPAA-compliant audit log export via Cloudflare Logpush. Every access event. Every admin action.

🤖

API Shield ML

Machine-learning anomaly detection on all API traffic. Rate limiting, bot scoring, DDoS mitigation.

Merkle Root Ledger

SHA-256 + Ed25519 + RFC3161 timestamps. Optional blockchain anchoring for maximum defensibility.


The Anchor BlackBox™ Defense Package

One click.
Full Kovel coverage.

The Kovel Documentation Package is four documents, generated automatically from AIDR™ and CAIR™ records, that satisfy every element of the Heppner three-prong test and provide attorney-client privilege protection for AI-assisted work.

Kovel Documentation Package

Generated per matter, on demand. Every document is auto-populated from your AIDR™ and CAIR™ records, signed, timestamped, and ready to produce to opposing counsel, the court, or your malpractice carrier.

📋 Counsel Direction Memo
Prong 1: Client authorization
📘 Firm AI Governance Policy
Baseline governance framework
🔗 Session Chain of Custody
Complete AIDR™ + CAIR™ records
📜 Commercial Terms Certificate
LLM provider terms confirmation
Generate Package

Per matter. Auto-populated.
Signed and timestamped.

Early Access

The recorder is
ready when you are.

Anchor BlackBox™ is currently in early access for mid-market law firms of 5–150 attorneys. Request access today.

Controlled. Documented. Defensible.™
At Industry Events

Trade Show Ready

From ABA TECHSHOW to regional bar association conferences, Anchor BlackBox™ arrives in force. Six branded giveaways designed to start the conversation about AI governance before you say a word.

Anchor BlackBox™ trade show giveaways Giveaways coming soon
</