@spurvik/sdk v1.0 is live Art. 50 applies since 2 Aug 2026

Your AI app, before and after two lines of code.

Art. 50 AI notice, PII-free Art. 12 logs, and an Art. 14 human gate for risky agent actions. Flip the switch.

See the 3 steps

Unprotected AI appNon-compliant since 2 Aug 2026 Spurvik protected2 lines of code

Saltvig TelecomSupport chat

AI system · Art. 50 notice · Verified by Spurvik

No Art. 50 AI badge

AI noticeArt. 50(1)

No Art. 50 AI badgeUsers can't tell it's AI.

Badge on first messageDeployer named:

LogsArt. 12 · GDPR

Raw PII logged in plaintext → GDPR violation

14:02:11 input_hmac= raw_text=∅

HMAC-SHA256 · key never leaves you

Agent controlArt. 14

Agent retry loop ×60 tokens burned

System-One (Jev)

Audit trailAnnex IV

€15M / 3% turnover exposure

Annex IV audit pack: READY

Simulated. Router and HMAC run in your browser with the SDK's logic. Check your own repo: npx @spurvik/sdk check

Install to DPO hand-off in three steps

Preview with a sample workspace.

src/chat.ts


import OpenAI from "openai";import { wrapOpenAIDecision } from "@spurvik/sdk"; const out = await openai.responses.create(req);const out = await wrapOpenAIDecision({ goal, taskType, executeDecision: () => openai.responses.create(req) }, spurvik);

Terminal3 findings

$ npx @spurvik/sdk check

spurvik = { appId, principal, hmacKey: process.env.SPURVIK_HMAC_KEY } · Tarball: npm i https://spurvik.com/sdk/latest.tgz

Why not just OpenAI's built-in logs or an observability tool?

They show what the model did. Regulators ask what your system did and who signed off.

Capability	Spurviksovereign record, fra1	OpenAI nativeplatform logs, guardrails	LLM observabilityLangSmith, Helicone
Zero-PII recordno raw prompts at rest	Keyed HMAC in your process	Zero retention on approval	Masking you configure; raw by default
Multi-modelOpenAI, Anthropic, local	One record for all	OpenAI calls only	Multi-provider
Independent EU recordheld outside the model vendor	Frankfurt fra1, or your own EU store	EU residency, vendor-held	EU region or self-host
Art. 50 notice at runtime	Badge, shown and logged	Not provided	Not provided
Signed Annex IV evidence packwith prEN 18286 mapping	1-click export	Not provided	Not provided

Public documentation, October 2026. Dash = possible with configuration or approval. Hosted fra1 retention is planned.

Priced for European teams

All prices excl. VAT. Businesses (B2B) only.

SDK Live

€0

@spurvik/sdk v1.0

Art. 50(1) notice widget
Keyed-HMAC event envelopes
System-One router

Team

€249 /mo

or €2,490/yr · up to 50,000 events/mo

Event logs, supports Art. 12
Human review queue, supports Art. 14
90-day pilot €522.90, credited on conversion

Start Team

Scale

€1,490 /mo

or €14,900/yr · up to 1,000,000 events/mo

Annex IV evidence exports
Two-account confirmation (pre-release)
90-day pilot €3,129, credited on conversion

Start Scale

Enterprise

from €30,000 /yr

Custom event volume

Dedicated EU region
Custom SLA
DPO onboarding

Talk to us

Founding 10 design partners

The first 10 paid subscriptions get founding terms. Offer closes 2 December 2026.

Email nathaniel@spurvik.com

When you email us, EyeTea Solutions ApS (CVR 37093378) processes your contact details under GDPR Art. 6(1)(b) to answer your request. See the imprint & privacy policy.