Security

Compliance work depends on trust. Here's how Sentryline earns it.

Missing is safer than wrong

When Sentryline can't support a regulatory citation with confidence, it says “no citation found” rather than attach a wrong one.

Decision-support only

Sentryline is not legal advice, not certification, and not a compliance guarantee. Reports are AI-assisted and should be reviewed by a qualified professional.

What we ask of you

Documents are private and owner-scoped, and transmitted to Sentryline over HTTPS. You agree not to upload PHI, Social Security numbers, payment card data, or other personal data — Sentryline reviews business documents, not personal records.

Security

Private storageDocuments are stored privately and only accessible through authenticated, owner-scoped access.

Row-level securityDatabase policies restrict users to their own records.

Encrypted at rest and in transitYour documents are encrypted at rest (AES-256) and in transit (TLS) by our infrastructure provider.

Least-privilege keysThe browser only ever uses a publishable key. Service-role keys never leave the server.

Role-based adminAdmin actions are gated by a separate roles table — never by client-side claims.

AI-assisted document reviewDocument analysis runs on our AI provider's paid API tier, which per its terms does not use your content to train its models.