Compliance & Governance
Built for the most sensitive intelligence operations
Core Principles
Legal admissibility, data protection, and operational security as architectural foundations
Data Sovereignty
Deployed entirely within your infrastructure—on-premise, government cloud, or air-gapped networks. No data transmitted to external services. All AI models run locally. Encryption keys under your control with AES-256 at rest and TLS 1.3 in transit.
Chain of Custody
Cryptographically signed, immutable audit logs of every action. Evidence packages include source data, analysis methods, and access history.
Access Controls
Role-based permissions across the system and per case, with separate edit and view-only access. Need-to-know enforcement restricts each case to the people assigned to it.
GDPR & EU AI Act Compliant
Regulatory compliance built into the architecture
Data Retention Policies
Set how long an inactive case stays open and when a closed case is deleted, with advance notice before deletion. Cases can be marked never-delete. Data is purged automatically when the retention period is reached, supporting GDPR storage-limitation requirements and your agency's records policy.
Right to Erasure
Delete individual records, entities, or entire cases on request. Deletion is complete and verifiable — supporting GDPR Article 17 (right to be forgotten) and subject access request workflows.
Full Traceability
Every extraction, correlation, and finding links back to its exact source. Every user action is recorded. Demonstrate to courts, regulators, and data protection officers exactly how any result was produced.
Immutable Audit Logs
Cryptographically signed, tamper-evident logs of every action — access, query, export, and edit. Exportable for legal review, internal affairs, and regulatory inspection.
Optional Biometric Modules
Face clustering and voice signature matching are configurable and can be disabled per deployment to meet EU AI Act constraints on biometric identification. Investigators get only the capabilities they are authorized to use.
Human-in-the-Loop by Design
SentraLink surfaces connections; investigators decide. No automated decisions about individuals — aligning with EU AI Act requirements for high-risk AI systems and meaningful human oversight.
Human-in-the-Loop
SentraLink empowers investigators, it doesn't replace them
AI as Assistant
AI identifies patterns and surfaces connections—investigators make decisions. Every insight includes explanation of derivation, data used, and confidence level for informed evaluation.
Oversight & Accountability
Comprehensive audit logs enable review by internal affairs, inspectors general, privacy officers, and courts. Transparency maintains public trust in powerful intelligence tools.