Finite State Machine engine
Guard conditions, allowed transitions, and an append-only event log. No workflow can skip a step or be backdated. Every transition stores who acted, when, and what the payload was — the row is permanent.
Regulated Workflows
Compliance isn't a checkbox. Neither is AI.
Audit-ready state-machine workflows, a quality management system with signed actions, and a sovereign AI assistant that never routes your procedures through a third-party server — on a tenant database you own.
Who this is for
Compliance and quality teams in regulated industries — MedTech, pharma, financial services, manufacturing companies, and any company under SOC 2, ISO 9001, HIPAA, or a government contract. You have workflows that produce paper or spreadsheets when they should produce signed, timestamped, tamper-evident records. You have an AI strategy that stalled when legal asked where your proprietary procedures were going.
ISVs building for enterprise buyers. Your product's procurement review now includes a compliance questionnaire. Your customers want to know whether your AI routes their data to a shared cloud index. FastYoke gives you a compliant workflow engine and a sovereign AI layer you can ship as part of your product — not bolt on later.
The foundation
Every state change is a signed, timestamped record
The FSM engine enforces allowed transitions and writes every state change to an append-only event log. No step can be skipped, no record can be backdated, and every action carries the actor's identity, timestamp, and payload.
Legally-binding e-signatures
Ed25519 hash-sealed signatures on any form or document. The seal is verified within the tenant database — no third-party account, no per-envelope fee. Signatures travel with the record, not with an external service.
Forms → PDF audit package
Build the SOP form in the drag-and-drop builder. It renders to a timestamped PDF at submission, attaches the signature seal, and lands in the entity record. Auditors get a deterministic ZIP — not a URL that might 404 in two years.
The QMS layer
A quality system built on the same FSM engine, not bolted alongside it
Document control, CAPA, change control, and framework evidence collection all run on the same state-machine engine as your operational workflows. One audit trail, not two.
QMS app
Document control, CAPA, and change-control workflows — signed, FSM-gated, and stored in your tenant database. The same engine that runs your operational workflows runs your quality records. Enterprise plan.
Compliance Yoke
Map your controls to SOC 2, HIPAA, or ISO 27001. Connect GitHub, AWS, and cloud infrastructure as evidence sources. The Auditor Room lets external auditors pull a deterministic sample and export OSCAL + ZIP without a production login.
FDA / ISO crosswalk pack
Pre-built control mappings for FDA 21 CFR Part 11 and ISO 13485 overlaid on the Compliance Yoke. Ships as a framework-as-data add-on — no code changes needed to activate it.
The AI layer — on your VM, not theirs
Your procedures stay on your infrastructure. Full stop.
Most AI assistants send your documents to a shared cloud index to answer questions. For regulated organizations, that creates two problems: your SOPs and proprietary procedures leave your network (data residency failure), and your auditor can now ask what third-party model processed your controlled documents (audit exposure). FastYoke's AI assistant runs entirely on your Fly.io VM. The retrieval index never leaves. The only call that crosses the wire is the one you explicitly authorize — to an LLM endpoint you control.
On-VM Yoker assistant
MiniLM embeddings and retrieval run in-process on your VM. Ask questions against your entity records, SOPs, and audit history. No OpenAI call, no shared cloud index, no subprocessor to disclose to your auditor.
Microsoft 365 content ingest (coming soon)
Connect your Azure AD app and FastYoke ingests your M365 email threads and SharePoint files into the on-VM index — without routing them through Microsoft's Copilot. Your CAPA discussions in Outlook stay inside your infrastructure.
Bring-your-own model
Enterprise tenants can supply their own LLM API key and point the assistant at a private deployment — an Azure OpenAI endpoint in your subscription, an Anthropic key, or a self-hosted model. Retrieval is always on-VM; only generation leaves.
Regulated workflows aren't a vertical. They're a posture.
FastYoke ships the posture: signed records, a QMS that shares an engine with your operational software, and AI that doesn't create a new compliance liability in order to close an old one. Available on the Enterprise plan.