The AI your HR and ops teams
can finally trust
— without sending a byte outside.
Sentinel OS is a private AI operating system that lives on your hardware. It runs the language models, the agent runtime and the data plane behind your people decisions — sealed, auditable, and governed by the keys you already hold.
- retrieve
handbook/v9.pdf✓ - retrieve
de-maternity-act-2024✓ - draft policy · review against §4.2, §7 ✓
- await legal approval · route to
@m.schulz…
One runtime.
Every workflow your people team runs.
Sentinel OS is not a chat box with a logo on it. It is a governed environment — with retrieval, tools, memory and policy baked in — that ships ready to deploy across HR, L&D, IT and operations.
Policy copilot
Drafts, redlines and version-controls every policy against your internal handbook and current labor law — without a single prompt ever leaving the appliance.
Talent intelligence
Reads résumés, internal reviews and 1:1 notes to surface skills, growth paths and flight risk. Ranking models trained on your data, on your box.
People analytics
Ask plain-English questions about attrition, comp bands, headcount planning. Answers come with the row, the source and the audit trail.
Ops automation
Closes the loop between HRIS, payroll, IT provisioning and ticketing. Approvals, offboarding, access reviews — all in one auditable flow.
Designed by people who have shipped to defense and finance regulators.
Air-gapped by default
Runs on your hardware or your private cloud. No outbound calls, no telemetry, no model calls to third parties. The network cable is optional.
Cryptographic isolation
Per-tenant keys, sealed memory regions and TPM-bound model weights. Even with root, prompts and documents stay sealed to the workload.
Provable audit
Every prompt, retrieval and tool call is hash-chained to an immutable, locally-stored ledger. Exportable as signed bundles for compliance.
Bring your own model
Mix Llama, Mistral, Qwen or your own fine-tunes. Hot-swap them per department. The OS speaks to all of them through one governed runtime.
Four planes. Zero internet between them.
Edge
- › Voice
- › Documents
- › Ticketing
- › SSO / SCIM
Orchestrator
- › Planner
- › Tool registry
- › Policy guard
- › Memory
Models
- › HR-tuned 70B
- › Code 34B
- › Voice 8B
- › Vision 12B
Data plane
- › HRIS
- › Payroll
- › L&D
- › Encrypted lake
One operator surface for every model and every department.
Provision tenants, swap models, inspect the audit ledger, throttle a runaway agent. Designed for IT, security and HR — not just engineers.
- HR — global
- HR — EMEA active
- Talent
- Payroll ops
- IT provisioning
- Legal review
- hr-tuned-70binference
- code-34bidle
- voice-8binference
Ask the sealed assistant.
It only ever reads what you type here.
A public preview of the runtime's policy guard and retrieval reasoning — running entirely in your browser. No prompt, no log, no fingerprint leaves the page.
- ▸ runtime idle · awaiting prompt
◇ This is a public teaser. The production runtime streams to your HRIS, applies your policy file, and writes every exchange to a sealed, hash-chained audit ledger.
Questions we get from
CISOs, GCs and CHROs.
01 Does the OS ever talk to the public internet?
+
Does the OS ever talk to the public internet?
No. By default the appliance is fully offline. The only outbound traffic is the package update channel you whitelist — and that runs on a signed, air-gap-friendly mirror.
02 How is this different from running ChatGPT Enterprise?
+
How is this different from running ChatGPT Enterprise?
Your data, weights, prompts and indexes never leave your perimeter. You own the keys, the model and the audit log. There is no vendor tenant behind a login.
03 What hardware does it need?
+
What hardware does it need?
A single 2U server with one or two accelerators is enough for a 5,000-employee company. Larger deployments scale horizontally — the orchestrator is stateless.
04 Can it integrate with our existing HRIS?
+
Can it integrate with our existing HRIS?
Yes. Native connectors for Workday, BambooHR, ADP, Personio, SAP SuccessFactors and 40+ others. Custom sources go through a typed adapter SDK.
05 How are roles and access enforced?
+
How are roles and access enforced?
Reuses your IdP. Scopes are mapped to a per-action policy file. Sensitive queries — compensation, medical, terminations — require step-up auth and are written to the audit log.
06 What about regulators and DSAR requests?
+
What about regulators and DSAR requests?
One signed command exports the full data trail for a person, including every prompt, retrieval and access. The bundle is GDPR-, SOC 2- and ISO 27001-friendly out of the box.
See Sentinel OS on your data, in your four walls.
We will spin up a sandbox against an anonymized snapshot of your HRIS, walk you through a real workflow, and answer every security questionnaire your team can throw at us.