Documentation

Everything you need to get started with Sentinel Shield and understand what each module does.

Last updated: 28 September 2026

Getting Started

New to Sentinel Shield? Follow these five steps to get up and running:

1
Create your account. Sign up and complete onboarding to set up your organisation profile.
2
Register your first AI system. Add an AI system to the AI System Registry with version, owner, and risk classification.
3
Run a DPIA with risk scoring. Use the DPIA module to assess likelihood × impact, record mitigations, and compute residual risk.
4
Review the Risk Alert Centre. Check open risk alerts, assign owners, and track mitigation through to closure.
5
Track compliance with multi-framework scoring. Monitor your scores across EU AI Act, GDPR, ISO 27001, SOC 2, and NIST AI RMF.

Module guide

Sentinel Shield is built from sixteen modules. Here is what each one does and when to use it:

AI System Registry

A centralised inventory of every AI system you operate. Track versions, ownership, risk classification (low → critical), operational status, and attached documentation. Use it as the single source of truth for what AI you run and where.

Annex IV Technical Documentation

EU AI Act-compliant dossiers covering intended purpose, training data descriptions, known limitations, performance metrics, bias testing, and human oversight measures. Use it when you need to produce or maintain technical documentation for a high-risk AI system.

DPIA with Risk Scoring

Data Protection Impact Assessments with likelihood × impact matrices, residual risk calculation, and mitigation tracking. Use it before deploying a new processing activity that is likely to result in high risk to individuals.

Risk Alert Centre

A severity-based board for risk alerts (low / medium / high / critical) with threaded discussions, assignment, and status lifecycle. Use it to triage, assign, and close out risks as they arise.

Multi-Framework Compliance Scoring

Continuous gap analysis against EU AI Act, GDPR, ISO 27001, SOC 2, and NIST AI RMF with live pass/fail scoring. Use it to see where you stand and which controls still need attention.

Immutable Audit Trail

A tamper-evident, SHA-256 hash-chained log of every AI decision, user action, and system event. Use it to demonstrate historical integrity to auditors and regulators.

Audit Findings & Remediation

A findings register with severity classification, area mapping, and linked remediation tasks. Use it to track audit findings through to closure with assignees, priorities, and due dates.

Evidence Repository

A secure document vault for certificates, signed forms, policies, and reports with expiry tracking. Use it to store and organise the evidence your auditors will ask to see.

ROPA — Article 30 Register

Records of Processing Activities with legal basis, data categories, data subjects, recipients, and retention periods. Use it to maintain your GDPR Article 30 register.

DSAR with 30-Day SLA

A data subject access request workflow with identity verification, request type tracking, and a 30-day SLA countdown. Use it to manage and respond to individual rights requests on time.

Processor & Transfer Management

A vendor register with DPA tracking, sub-processor disclosure, and transfer mechanisms. Use it to manage your processors and international transfer compliance.

Retention & Consent Registers

Data retention schedules with legal basis and disposal methods, alongside consent records with version and withdrawal tracking. Use it to document how long you keep data and on what basis.

Versioned Policy Approvals

Policy lifecycle management (draft → approved → active → superseded) with digital signatures and full version history. Use it to draft, approve, and maintain policies with an attributable audit trail.

Incident & Breach Management

Incident response with 72-hour breach notification countdown timers, authority reporting tracking, and containment actions. Use it to manage incidents and meet notification deadlines.

Staff Training & Awareness

Training records for GDPR, AI Act, security, data handling, and breach response with completion tracking and overdue alerts. Use it to ensure your staff complete required training.

Audit Pack PDF Export

One-click regulator-ready bundles combining ROPA, policy approvals, evidence, and audit trail. Use it when you need to submit a structured compliance pack to a supervisory authority.

AI transparency

The Sentinel Shield AI Assistant is a help and support aid. It does not make compliance decisions autonomously — every compliance determination (risk classification, DPIA outcomes, policy approvals, incident severity) remains with your accountable human users. The Assistant can summarise, surface, and help you navigate the platform, but it does not certify, sign off, or override human judgement. Customer data is never used to train third-party models.

Frequently asked questions

Looking for quick answers? See our FAQ for common questions about the product, data and security, and pricing.