GovernorAIby SentinelLayer Request a briefing
Find and qualify
Discovery & Shadow AIInventory the AI activity nobody registered AssuranceEvaluate an agent snapshot before production
Decide and enforce
Policy & GovernanceKeep the policy engine you already run Runtime EnforcementDecide at the action boundary Inference & Model GovernanceGovern the model call itself Multi-cloudOne policy, each cloud's own controls
Prove and observe
Evidence & ComplianceTamper-evident record, mapped to controls Decision ObservabilitySee the decision behind the action
Risk and security
RiskScore the action, and act on the score ContainmentStop a runaway run before it lands Security architectureHow the control plane itself is built
By persona
SecurityPer-call authorization and stop controls GRCEvidence chains and control mapping Platform & AI EngineeringGovern without touching the agent
By risk
Shadow AIUnmanaged agents and connections Data leakageIn prompts, completions and tool calls Destructive actionsChanges to systems of record
By platform
AWS BedrockInbound path, guardrail attachment ServiceNowNow Assist discovery and scoped control SalesforceAgentforce and Einstein Bots, in-org MCPRegistry, proxy, argument-aware inspection
By cloud and runtime
AzureConnect, discover, govern at the gateway Google CloudValidated connect mode, bootstrap session DatabricksCluster-side egress, pinned at create Kubernetes & sidecarIn your cluster, on the agent host

Legal

Privacy policy.

What this site and the design-partner process collect, why, and what happens to it. Written to be checked, not to be waved through.

Effective date · 22 September 2026

SCOPE

What this policy covers.

This policy covers the SentinelLayer website and the design-partner enquiry process. It does not describe data processed inside a customer's own GovernorAI deployment — that is governed by the agreement signed with that customer.

Information we collect

When you visit this site or contact us, we may collect:

  • Name and email address, when you submit the briefing request form
  • Company name and role
  • Usage data and analytics through standard web technologies
  • Anything you choose to include when contacting us by email

How we use it

  • To respond to enquiries and design-partner applications
  • To improve this site and the product
  • To send updates about GovernorAI™, where you have consented
  • To meet legal obligations

Processors and storage

Briefing form submissions are processed through Formspree and stored under that provider's controls. We do not sell personal information, and we do not share it with third parties for marketing purposes.

The processors used for this website and the enquiry process are:

  • Vercel — website hosting and delivery, including edge caching and request logs.
  • Formspree — processing of briefing-form submissions.

No behavioural analytics provider and no CRM is used. Payment processing is not in scope for this policy: no payment is taken through this site.

Retention

Briefing submissions are deleted 12 months after last activity, unless a business or legal hold applies. Marketing contacts are retained until they unsubscribe, or after 24 months of inactivity, whichever comes first.

Deletion is actioned from Formspree, the briefing inbox, and any CRM adopted later, and completion is recorded. To request deletion, write to privacy@sentinellayer.dev.

Cookies

We use essential cookies for site functionality only. No behavioural analytics provider is used, and this site sets no analytics or advertising cookies, so no cookie-consent banner is presented. We do not intentionally store IP addresses in the application; Vercel and Formspree may process them in their own logs under their own policies. Cookies can be disabled in your browser settings.

Your rights

Subject to applicable law, you may request access to the personal information we hold about you, ask for it to be corrected or deleted, opt out of communications, or request portability.

We handle requests about personal data consistently with applicable data-protection law. We do not claim certification under any privacy regime, and we do not list the regimes we consider applicable here until that assessment is complete.

We aim to respond to any request within 30 days, and will say so if a request is complex enough to need longer.

International transfers

The processors named above operate globally distributed infrastructure, so personal data may be processed outside your own country. We have not yet published the specific transfer mechanism relied on for each processor. If that matters to your assessment, ask us before submitting anything and we will answer directly.

Contact

Privacy enquiries: privacy@sentinellayer.dev

SentinelLayer, Inc., a Delaware corporation. Registered office: 251 Little Falls Drive, Wilmington, New Castle County, Delaware 19808, c/o Corporation Service Company. SentinelLayer, Inc. is the controller for personal data collected through this site.

The registered office receives formal legal notice only; it is a registered-agent address and is not staffed to action privacy requests. Send those to privacy@sentinellayer.dev, which is monitored.

No data protection officer and no EU or UK representative is appointed; the thresholds that would require one are not met. Privacy questions go to privacy@sentinellayer.dev.

Changes

We may update this policy. Material changes will be posted on this page with a revised effective date.

Honesty note

This page is a draft carried across from the published SentinelLayer site and re-scoped for GovernorAI. Every marker above is a fact we have not sourced rather than one we have decided. It is not legal advice, and it should be reviewed by counsel before this site is published.