AI SENTINEL
A purpose-built platform for AI governance. Manage the AI system inventory, EU AI Act compliance, risk classification, human oversight, and AI-specific incidents: all in one place.
Quick start
Sign in
Sign in via email magic link or Google OAuth.
Create or join the organization
Set up the organization and invite team members. Users with a matching email domain are auto-joined.
Register the organization's AI systems
Build the organization's AI inventory by registering systems, models, and agents. Assign risk levels and owners.
Govern the organization's AI
Run assessments, set up oversight gates, map compliance frameworks, manage vendors, and track incidents.
User roles
Owner
Team management, organization settings, license activation, deleting the organization
Admin
User management, module configuration, full governance access
AI Officer
All governance modules, assessments, risk classification, incident management
Member
Create and edit records, submit assessments, report incidents
Viewer
Read-only dashboard and report access
Modules
The organization's AI systems
Inventory all AI systems, models, and agents with lifecycle tracking and role assignment.
Risk classification
EU AI Act four-tier risk classification: a rule screening suggests a level, you choose it and the Annex III category, with classification history.
Threat model
For the team building the AI: what could go wrong, what stops it, and whether that was tested.
Assessments
FRIA, conformity, AI risk, and bias/fairness assessments with templates and approval workflows.
Human oversight
Approval gates, review scheduling, and decision logging for Art. 14 compliance.
AI incidents
Track AI-specific failures, coordinate response tasks, and manage Art. 73 authority notifications.
Transparency (Art. 50)
Per-system Art. 50 obligations, the synthetic-content marking deadline, and the AI interaction statement.
Cross-border regimes
One impact assessment answering the EU AI Act, the GDPR, California ADMT, Colorado, Texas and Washington, and the three documents it generates.
Compliance
Framework mapping across the EU AI Act, GDPR, NIST AI RMF, ISO 42001, AIUC-1 (the certification standard for AI agents), California ADMT, Colorado, Texas and Washington, with evidence management and cross-framework links.
Vendor risk
Third-party AI vendor management with risk assessment, contract tracking, and due diligence.
Policy management
AI governance policies with versioning, approval workflow, and system linking.
Premium modules
Four modules and three finished deliverables are premium. Their source code is published with the rest of the product under the AGPL.
How the premium modules are offered
- Included on the TODO.LAW cloud, in the free pilot and on the paid plan.
- On a managed instance or on your own hardware, they are licensed separately.
AI tools in use
PremiumRecord the AI tools people in the organization use, against a catalog of 89 known tools: a self-reporting portal, a triage workflow, and promotion to the organization's AI systems.
Vendor catalog
PremiumCatalog of 950+ AI vendors with risk profiles, compliance certifications, and governance metadata.
Conformity assessment
PremiumEU AI Act Art. 43 conformity assessment template for high-risk AI systems with structured evaluation sections.
Bias & fairness assessment
PremiumStructured bias and fairness evaluation for AI systems: detect discrimination risks and document mitigations.
Also in the app
Shipped features that do not have a full guide here yet. The links go to the app itself, so you will be asked to sign in.
How it fits together
What you put in, what the product derives, and what you hand over.
Frameworks compared
Thirteen AI governance frameworks, including AIUC-1 for AI agents, on fourteen dimensions: a wheel, a table, a side-by-side comparison and a selector.
Quick Start wizard
Set up a program from an industry template, or import an existing vendor portfolio.
AI posture
Choose whether embedded AI assists are off, use a cloud LLM, or route through a local gateway. Off by default: no AI call leaves your instance until an admin turns it on.
Skills & licenses
Activate TODO.LAW license files offline. Owner and admin only; a license never installs code, it only unlocks an entitlement.
Managed organizations
For governance professionals running programs for several clients: switch between organizations you manage.
Open core licensing
Core
- AI Registry & lifecycle tracking
- EU AI Act risk classification
- FRIA & AI Risk assessments
- Human oversight & approval gates
- AI incident management
- Compliance mapping across nine frameworks (EU AI Act, GDPR, NIST AI RMF, ISO/IEC 42001, AIUC-1, California, Colorado, Texas, Washington)
- Vendor risk management
- Policy management
- Executive dashboard
Premium
- Conformity Assessment template (Art. 43)
- Bias & fairness assessment
- AI tools in use (89-tool catalog)
- AI Vendor Catalog (vendor.watch integration)
- Finished deliverables: the impact assessment document, the program report and the program pack