Skip to main content
Sentinel

Security & Compliance

Sentinel is built from the ground up to protect children's data. Every design decision starts with security.

Technical Security

Encryption

  • AES-256 encryption at rest for all stored data
  • TLS 1.3 encryption for all data in transit
  • Field-level encryption for sensitive fields (body maps, safeguarding notes)
  • Encrypted database backups with separate key management

Access Control

  • Role-based access control (RBAC) with 8 granular permission levels
  • Multi-factor authentication (MFA) for all accounts
  • Automatic session timeout after 30 minutes of inactivity
  • IP allowlisting for administrative access
  • Individual audit trails for every user action

Infrastructure

  • UK-based data centres — data never leaves the United Kingdom
  • Daily automated backups with 30-day retention
  • 99.9% uptime SLA for Enterprise customers
  • DDoS protection and rate limiting
  • Isolated tenant databases — no shared data between organisations

Monitoring & Audit

  • Comprehensive audit trail for every record creation, edit, and deletion
  • Real-time security event monitoring
  • Automated anomaly detection for unusual access patterns
  • Quarterly vulnerability scanning
  • Annual CREST-certified penetration testing

Regulatory Compliance

UK GDPR & Data Protection Act 2018

Full compliance with UK data protection legislation. Privacy by design and by default. Data Protection Impact Assessments conducted for all high-risk processing. Lawful basis documented for every processing activity.

Children's Homes Regulations 2015

Platform designed specifically around Schedule 3 record-keeping requirements. Automated compliance monitoring for Reg 44 (monthly visits), Reg 45 (quality of care reviews), and Reg 40 (notifiable events).

Working Together to Safeguard Children 2023

Multi-agency information sharing capabilities aligned with statutory guidance. Secure portal for local authorities, CAMHS, education, and other professionals involved in children's care.

Keeping Children Safe in Education 2024

Education module aligned with KCSiE requirements for designated safeguarding leads. PEP template integration and attendance tracking.

NHS Data Security & Protection Toolkit

Platform designed to support homes completing the NHS DSPT. Built-in self-assessment module with evidence mapping to all 10 data security standards.

Certification Roadmap

CertificationStatusTarget
Cyber EssentialsIn ProgressQ2 2026
Cyber Essentials PlusPlannedQ3 2026
ISO 27001PlannedQ4 2026
CREST Penetration TestPlannedQ2 2026
ICO RegistrationIn ProgressApril 2026
NHS DSPT ComplianceIn ProgressQ2 2026

Security Questions?

We welcome security enquiries from prospective customers, local authorities, and regulators.