Privacy by design

Powerful signals. Deliberate restraint.

The production architecture is designed around data minimisation, purpose limitation, role-based access, retention controls, auditability and human review.

No protected-trait inference

Sentinel should not infer religion, ethnicity, political belief, medical diagnosis, sexual orientation or other protected/sensitive identity characteristics.

No covert emotion recognition

No webcam, facial-expression or hidden voice-emotion scoring is part of the core product.

Minimum necessary access

Raw reports are visible only to authorised reviewers with a legitimate role. Leaders primarily see thresholded team-level trends.

Separation of support and discipline

A support request should not automatically enter a security or disciplinary workflow.

Audit everything consequential

Every review, escalation, override and disposition should leave an auditable record.