Platform

One platform, from the request to the regulator.

Sengol is a self-hosted appliance. You install it inside your own perimeter, point it at your own Postgres, and govern your own agents. These are the parts, and what each one does and does not do.

Request a pilot Read the docs
Runtime guardrails

Stop a failing response before the caller sees it.

  • sengol.instrument() raises BlockedError on a CRITICAL failure.
  • GuardrailRuntime acts on its on_failure mode. block and fallback withhold the failed response; retry does not, so choose deliberately.
  • InlineEvaluator puts scores on the hot path and enforces nothing.
Evaluation

32 evaluators, deterministic checks first.

  • Deterministic evaluators run first; LLM judges run concurrently in one pass per attempt.
  • Bring any model that speaks the LLMJudge interface.
  • Evaluators cover PII, hallucination, groundedness, fairness, red-team, tool-call and schema checks, and more.
CI gate

Gate the deploy on your own thresholds.

  • sengol gate runs the suite against a dataset and checks it against ControlBook thresholds.
  • Pass --fail-on-gate-failure to exit non-zero on a miss; without it the exit code is 0.
  • The gate verdict is a signed record, not a separate CI artifact.
Signed evidence

A record an outside party can check.

  • Records are HMAC-signed and hash-chained, and Ed25519-countersigned when a signer is configured.
  • Stored append-only in your own Postgres. RFC 3161 timestamp anchoring is optional.
  • sengol-verify is a separate Apache-2.0 verifier that needs no licence.
Compliance

Each regulation becomes a list of obligations.

  • 29 regulations ship in the catalog, including OSFI E-23, FINTRAC, GDPR, the EU AI Act and HIPAA.
  • Your own policy is another catalog entry, with the same reports.
  • sengol report generate produces the ControlBook-driven PDF or JSON report.
Access and identity

Who can do what, provable after the fact.

  • Entra ID / OIDC, SAML, SCIM, or local users with optional TOTP.
  • Eleven role templates ship, and a separation-of-duties engine is live.
  • Erasure is dual-control: a different principal must approve, and a signed tombstone records it.

Where it runs

Docker Compose, Helm or Terraform, inside your own infrastructure. One install is one tenant; Sengol is not a hosted multi-tenant service. The licence is a signed file verified offline when a process starts, and Sengol sends no licence check or telemetry.

Install guide · Security · Documentation

Request a pilot

See it on your own agents.

A 14-day pilot is the full product, arranged with Sengol after a request.

Request a pilot Talk to us