Compliance Approach

UK data protection

Deployments involving identifiable people must be planned under the UK GDPR and Data Protection Act 2018. This includes transparency, purpose limitation, data minimisation, accuracy, storage limitation, security and accountability. The appropriate lawful basis depends on who deploys the system and why.

Read the ICO UK GDPR guidance and the Data Protection Act 2018.

Video surveillance governance

Before deployment, the camera operator should document necessity and proportionality, lawful basis, signage and layered notices, camera field of view, incident retention, access permissions, disclosure procedures and data-subject request handling. A Data Protection Impact Assessment is required where processing is likely to create a high risk to people.

See the ICO's video surveillance guidance.

Responsible AI

SENTRL AI alerts support human decisions. We plan for documented evaluation, threshold review, false-positive monitoring, explainable incident context and routes for human correction. The system must not be represented as proving identity, intent or guilt.

See the ICO's AI and data protection guidance.

Cookies and electronic communications

Where we use storage or access technologies, or send electronic marketing, we consider PECR alongside UK GDPR. Optional cookies and direct marketing require the appropriate transparency and consent or other permitted conditions.

Not a certification register

This page describes our governance direction. It does not claim formal certification, statutory approval or compliance for every customer deployment. Customers remain responsible for their own legal obligations, with responsibilities allocated in signed contracts.