AIG Sentinel
AI governance for any organisation
See, assess, and prove every AI running across your organisation, and keep it within policy as adoption scales.
AI is already inside your organisation
Teams are adopting AI faster than anyone can govern it. Models and assistants spread through everyday tools, often without approval, while regulators raise the bar with the EU AI Act, ISO/IEC 42001, and sector-specific regimes.
Most organisations cannot answer the basic questions their boards and auditors now ask: what AI do we use, who approved it, and can we prove it is safe and accountable?
How AIG Sentinel helps your organisation
Find the AI you can't see
AIG Sentinel surfaces the AI already in use across your organisation, including the shadow AI hiding in everyday tools.
Assess against the frameworks that apply to you
Every use case is assessed against the NSW AI Assessment Framework today, with every clause cross-mapped to ISO/IEC 42001, the NIST AI RMF and the EU AI Act. Full packs for those three are in development.
Prove it with an audit-ready trail
A tamper-evident evidence trail gives auditors, boards, and regulators the assurance they need, on demand.
Govern without slowing adoption
Approval gates and guardrails keep AI moving safely, so governance enables adoption rather than blocking it.
What AIG Sentinel does
Governance, risk, compliance, and technology leaders in organisations that need their AI to be defensible.
- AI discovery and shadow-AI detection
- Use-case risk assessment and classification
- Framework mapping: NSW AI Assessment Framework (built); ISO/IEC 42001, NIST AI RMF, EU AI Act (cross-mapped; full packs in development)
- Approval workflows and policy gates
- Tamper-evident, audit-ready evidence trail
- Continuous monitoring and re-attestation
- Board- and regulator-ready reporting
Questions buyers ask
Is AIG Sentinel related to Microsoft Sentinel?
No. AIG Sentinel is Arrochar Labs' AI governance product: it finds the AI in use across an organisation, assesses each use against the frameworks that apply and produces an audit-ready evidence trail. Microsoft Sentinel is Microsoft's security information and event management (SIEM) service, and the two are not affiliated. Other AI governance tools also use the word Sentinel; AIG Sentinel is the one at aigsentinel.com and arrocharlabs.com.
How every deployment is structured
Standard rails. Made-to-measure services.
The governance rails are ready-made and the same for every customer, so their assurance is reused: assessed once, carried into every service, while each service is still assessed on its own. The services that run on them are built to fit the way your organisation actually works. You get software that fits, and it is still governed.
Governance rails
Ready-made. Identical for every customer.
AIG Sentinel sets the policy and holds the evidence. Meshbone enforces it at run time on every agent and service. agentVIKING™ is the set of rogue-agent controls the rails enforce on every agent they run. Because the rails are the same everywhere, an assessor who has assessed them once need not assess them again for the next service. Each service still carries its own assessment of its purpose, data, risks, integrations, rules and model use. The rails make that assessment smaller. They do not replace it. The rails subscription is the derisking spend: the controls, the monitoring and the evidence that the AI tools themselves do not include, paid for once and reused by every service rather than rebuilt around each one.
Service templates
Productised. Drawn from the catalogue.
Nanolitte is the build engine: every template is a BPMN 2.0 process it compiles into governed agents, with the guardrails inside. Grants, cases, permits, procurement, records, assets: each starts from a template that already runs on the rails, with intake, assessment, decision and record built in. A new service begins most of the way there rather than from a blank page.
Made to measure
Built for you. Kept small by design, measured on every build.
Your rules, your data model, your thresholds and your approval chain, configured and coded onto the template. This is where the hard part of any regulated service lives: the legislation, the exceptions, the delegations and the systems you keep. So we scope that share in three columns before a build starts, standard, configured and coded, and report it in the same three when it ends. Anything a second customer could use goes back into the template.
Run and support
Ongoing, on the rails.
Hosting, monitoring, policy re-attestation and upgrades, in your region. After go-live your own team changes a threshold or a form within guardrails, without waiting on us.
The rule
No made-to-measure build without the rails underneath it. That is the rule that keeps a custom service governed, upgradeable and provable, rather than a fork somebody has to maintain by hand forever.
Guarded by agentVIKING™
Any agent routed through the gateway, ours or yours, under the same four classes of control
Directive, preventive, detective and corrective. Written in AIG Sentinel, enforced at the gateway in front of the model, carried in every Nanolitte template, evidenced on one chain.
AIG Sentinel: writes the rule. Each use case is assessed in AIG Sentinel against the frameworks that apply, approved through its gates, and compiled into the signed run-time policy Meshbone enforces, with the audit-ready evidence trail that boards, auditors and regulators read.
See the controlsDirective
What the agent is allowed to do, as data.
Preventive
What stops it before it acts.
Detective
How we know when it goes wrong.
Corrective
How it is stopped, contained and fixed.
How it fits together
A complete suite of AI governance agents. An architecture that makes them accountable.
Each part of ASG™ does one job, in order, and hands the next part something it can check. That is the difference between building AI agents and running them so an auditor, a regulator or a minister can see what happened.
Before the first build, Orbit Roadmaps finds where AI creates value and profiles the risk.
After it, Execdive turns what the chain recorded into plain-language insight for executives.
Policy, enforcement, templates, data, controls, evidence. Then services.
This describes the architecture, not what every deployment runs today: 7 of the 30 agentVIKING™ controls are still in development.
- AIG Sentineldefines policy
- Meshboneenforces policy at run time
- Nanolittecarries the controls into reusable service templates
- Databallastcontrols what data the agent may access
- agentVIKING™is the control set across every agentAcross every step
- Evidence chainrecords what happened
- MeshGovuses the whole thing for government services
- MeshFinuses the whole thing for banking and financial services
One architecture, every product
A full AI-agentic experience
Every Arrochar Labs product is built the same way: agentic, event-driven, and governed with human-in-the-loop controls, so AI does the work while your people stay in control.
Agentic
AI agents do the work, end to end. Every product runs on autonomous agents that take action across your processes, not just a chat box, but software that actually gets the job done.
Event-driven
It reacts in real time. Products respond to what's actually happening (new data, a policy breach, an incoming request, a change in your estate) instead of waiting on a batch run or a person to press go.
Human-in-the-loop
Your people stay in control. Approval gates, oversight and a tamper-evident audit trail keep every agent accountable, so automation never runs unchecked.
See AIG Sentinel for yourself
See the plans and subscribe, or talk to us about how AIG Sentinel fits your organisation.
Part of one accountable AI lifecycle
Arrochar Labs builds AI as one lifecycle - discover, govern, build, operate, ground, decide. Each product is a pillar.