Data Sovereignty Policy
01. Zero-Egress Architecture
Sentinel is built on the principle of absolute sovereignty. Unlike traditional SaaS solutions, our audit engine based on WebAssembly (WASM) runs exclusively within the client's secure perimeter (browser or CI/CD environment). Processed data — whether source code or AI model metadata — never leaves this isolation.
02. Deterministic Edge Processing
We utilize Cloudflare Workers infrastructure to ensure ultra-fast global processing without storing raw data. The Sentinel engine executes EU AI Act rules in an ephemeral environment, and the only output transmitted to our infrastructure is the cryptographic hash of the compliance verdict.
03. Immutable Ledger (D1 Ledger)
Compliance proofs are anchored in the Cloudflare D1 distributed database. This functions as an "append-only" ledger, guaranteeing that audit history cannot be altered. Each entry is cryptographically signed (Ed25519), providing full traceability according to Article 12 of the EU AI Act.
Sovereign Compilation vs. SaaS API
Sentinel is not an external API that receives your data. It is a compiled library that analyzes your systems under your supervision:
- Mathematical Isolation: Sandboxed memory via V8 Isolates technology.
- No Central Persistence: Sensitive data is not written to any external disk.
- Verifiable Provenance: The engine code can be audited to confirm the absence of any exfiltration channels.