TracegenceNever fear a document audit again
About Tracegence

Audit-grade compliance,
by default.

Tracegence is the document compliance platform built for food, pharma, and manufacturing teams who answer to real auditors. Every rejection cites the rulebook clause. Every decision is recorded in an immutable, cryptographically chained log.

Team collaborating around laptops in a modern office

What this platform does

Six primitives, end-to-end. From the moment a supplier sends a PDF to the moment an auditor walks out with a signed pack.

Capture

From any source

Portal upload to S3, tokenised supplier email link, inbound SES, and a public REST API. Suppliers never need an account to send you a document.

Read

OCR + LLM extraction

AWS Textract pulls forms and tables. Google Gemini classifies the document type and extracts the structured fields a compliance manager needs.

Validate

Five rule types + RAG

required_fields, field_pattern, expiry_in_future, signed, rag_check. RAG retrieves rulebook chunks and cites the failing clause.

Decide

HMAC-signed approvals

Sequential or parallel approval chains. Every action HMAC-chained - a single tampered row breaks the whole chain at audit time.

Score

Live 0–100 score

Tenant compliance score recomputed on every status change. History snapshotted so you can answer "what was our score last March?".

Audit

Append-only log

Postgres-trigger immutable. S3 Object Lock retention on Enterprise. CSV export. The auditor sees exactly what we saw, in order.

Architecture, in one paragraph.

Multi-tenant SaaS on Postgres with Row-Level Security (USING + WITH CHECK). Subdomain-based tenant routing. Magic-link invite + JWT session + TOTP MFA on the Owner role. Per-tenant CMK on Enterprise tier. Append-only audit log with a Postgres trigger that physically blocks UPDATE / DELETE. Five-role hierarchy: Owner, Admin, Manager, Client, Auditor. Predictive risk scoring (renewal, recall, supplier watchlist) on Tier 3. Atomic Lua quotas in Redis. Saga-style Stripe webhook so DB and billing never desync.

  • 177acceptance tests passing
  • 12shipping phases complete
  • ~$0.40infra cost / user / month
AUDIT PACK · MAR 2026Documents in scope214Signed approvals198Compliance score94 / 100Findings open2
SQF EDITION 9BRCGS ISSUE 9FDA 21 CFR 117ISO 22000§2.4.6 ALLERGEN CONTROL…allergen test methods on every CoA…CITED IN REJECTIONSQF §2.4.6

Standards we cover today

The rule engine is loaded with current rulebook editions. New standards land roughly every quarter.

SQF Edition 9BRCGS Issue 9FDA 21 CFR Part 117ISO 22000FSSAIHACCP21 CFR Part 11 - Q3 2026ISO 9001 / IATF 16949 - Q3 2026

Help & support

Engineering and compliance support are the same team - pulling on different threads of the same product.

See it on your own document.

Spin up a tenant, upload a CoA or SDS, watch the engine cite the failing clause.