AI & data governance

Reliable data for your AI. Responsible AI to enable your business.

Two sides of one handshake. Sentinel readies both — honest scores, clear reasoning, human sign-off — so you can embrace AI with confidence.

ICO & EU frameworks Human-signed findings Your data stays yours
Sample posture · Data Protection
0.0/5
Developing

Foundations forming. Policies exist but aren't yet consistent or evidenced.

74% confident · target 3.5

Roles are assigned, but the accountability framework isn't documented end-to-end. Art 5(2) · ICO Accountability

A record of processing exists and is largely complete — two activities still need mapping. Art 30

Technical controls are in place, but testing and supplier assurance aren't yet evidenced. Art 32

A request process exists informally — no documented workflow or response timescales. Arts 12–22

Reviewed & signed by a data protection officerclick a row →
2pillars · data + AI
4governance modules
120controls live today
1–5maturity levels
UK/EUadequate hosting
Who we are

A governance practice built on one rule: no black-box verdicts.

What we govern

Two pillars. One handshake.

AI is only as good as the data behind it — and as trusted as the governance around it. Sentinel readies both.

Sentinel Data

Data your AI can rely on — lawful, protected, provable.

Data Protection

UK & EU GDPR, security, transfers — scored control by control.

Data Privacy

Rights in practice: requests, breaches, records, training.

Sentinel AI

AI your business can trust — visible, controlled, provable.

AI Usage Governance

Who uses AI, on which tools, for what — under a policy you can enforce.

AI Readiness

EU AI Act and ISO 42001 — ready before customers and regulators ask.

Value is created where they shake hands. Sentinel keeps the handshake sound.

Sentinel Align — a third pillar, in reserve: data quality, cataloguing, ownership. Built when you need it.

Why now

AI adoption has outrun governance.

You can't see it

Most workplace AI use is invisible to IT. Staff adopt tools long before anyone approves them.

The rules are here

EU AI Act penalties begin August 2026. UK regulators already expect AI use to respect data protection law.

Customers want proof

AI governance questions now appear in procurement. “We’re careful” is no longer an answer.

One engine under both

Different pillars. The same honest method.

Data or AI, every control is scored the same two ways — so a score always means the same thing.

1

Are you doing it?

Conformance with the regulator or standard — control by control.

2

How well, how consistently?

Maturity from 1 to 5 — from absent to embedded.

Behind both: a risk register from inherent to residual, remediation across people, process and technology — and a named human on the record.

The maturity ladder
1
Absent
2
Developing
3 ◈
Established
4
Managed
5
Embedded
Why it's different

Most reports ask you to trust a verdict. Ours shows its working.

Every score shows its working

Confidence, reasoning and legal source behind every rating. Findings you can defend to a board — or a regulator.

Honest confidence

We won't claim 99% when 80% is the honest answer. Where we're unsure, we say so.

A human signs it off

A qualified officer reviews and signs every conclusion — on your data and your AI. A human stays accountable.

Your data stays yours

Sensitive information stays on UK/EU-adequate infrastructure. A governance tool that is itself governed.

How it works

Three steps to an audit-ready roadmap.

STEP 01

Scope

We agree what applies — which modules, which controls, what data and AI you actually use.

Free · 30 minutes
STEP 02

Assess

Each control rated against clear anchors, with evidence behind every answer.

STEP 03

Roadmap

A posture report and a prioritised plan — what to fix first, and why.

What you get

Four documents you can act on — and take to an auditor.

01

Posture report

Where you stand, module by module, with confidence on every score.

02

Remediation roadmap

What to fix first — by people, process and technology.

03

Risk register

The risk behind each gap, its severity, and who owns it.

04

Evidence pack

Audit-ready and officer-signed — the working behind every conclusion.

Remediation roadmap12 actions · sample
p1Document the DPIA processArt 35 · AccountabilityProcess
p1Formalise data-subject request workflowArts 12–22 · Individual rightsProcess
p2Evidence supplier security assuranceArt 32 · SecurityTech
p2Assign & train records ownersArt 30 · RecordsPeople
p3Refresh staff awareness trainingArt 39 · GovernancePeople
Who it's for

For businesses that take data and AI seriously — without a full-time team for either.

You hold personal data. Your people use AI. Sentinel gives you one honest picture of both.

Recruitment agenciesClinics & healthcareProfessional servicesSaaS & techLife sciences25–250 people
Ready when you are

See where you stand.

A free 30-minute scoping call: your data, your AI use, and what a first assessment looks like.

hello@conduit488.com