How this document works. The Master Terms below apply to every Sentinel product. Each product also has its own Product Schedule that adds product-specific provisions (covered scope, pricing, deliverables, refund mechanics, specialty disclosures). Master Terms + the applicable Schedule together form your agreement with us for that product. If any provision in a Schedule conflicts with the Master Terms, the Schedule controls for that product only.
These Master Terms govern your use of any service ("Service") offered by Sentinel Risk Group, LLC, a Florida limited liability company ("Sentinel," "we," "our," "us"), through the website at sentinelriskgrp.com and any related properties.
These Master Terms apply to every Sentinel product. Each product also has its own Product Schedule that adds product-specific provisions. Master Terms + the applicable Product Schedule together form your agreement with us for that product. If any provision in a Schedule conflicts with these Master Terms, the Schedule controls for that product only.
By purchasing, engaging, or accessing any Sentinel Service, you accept these Master Terms and the applicable Product Schedule. If you do not agree, do not purchase or use the Service.
We may modify these Master Terms or any Schedule from time to time. Modifications become effective when posted with a new Effective Date. Material changes will be communicated by email to active customers at least ten (10) days before they take effect where practicable. Continued use of the Service after the Effective Date constitutes acceptance.
Sentinel Risk Group, LLC is not a law firm and does not provide legal advice. Use of any Sentinel Service does not create an attorney-client relationship. Sentinel's preparation of governance documentation, intake-driven assessments, and reviewer-validated reports is not the practice of law and is conducted consistent with Florida Bar Rule 10-2.1 (defining the practice of law) and the safe-harbor principles articulated in Florida Bar v. Sperry, 140 So. 2d 587 (Fla. 1962) (computer software with conspicuous notice that the product is not a substitute for legal advice). Customer is the filer and signatory of record on any Deliverable submitted to a third party; Sentinel does not file, submit, or transmit Deliverables on Customer's behalf. Deliverables are professional governance evaluation, certification, training, and advisory documentation prepared from your intake responses, your provided evidence, your AI vendor agreements, and the published policies of relevant regulatory bodies, applying the proprietary AI Governance Shield™ Method.
The professionals who designed the Sentinel methodologies do not provide legal services to customers through Sentinel. If your matter requires legal representation — drafting a contract, negotiating an enforcement action, defending litigation, advising on regulatory exposure — retain a licensed attorney in your jurisdiction. Selection and retention of an attorney is your decision alone.
You are the author and signatory of record for any decision based on a Sentinel Deliverable. We provide evaluation and certification; you remain the responsible decision-maker for your practice's operations.
Many Sentinel Services use software, including automated systems and large-language-model artificial-intelligence tools, in the production of Deliverables. This is true of the AI Governance Shield certification process (initial AI-assisted analysis followed by qualified-reviewer validation, per Schedule H.5) and the risk-assessment screening tool, among others.
AI-assisted generation does not change the no-attorney-client-relationship posture of any Service, the no-outcome-guarantee posture in §9, or your responsibility as the decision-maker for your practice. Every Deliverable that depends on AI-assisted analysis goes through a qualified-reviewer validation step before delivery; the specific workflow is described in the applicable Schedule.
AI-generated materials can contain errors. You are expected to review any Deliverable, ask questions, and surface inaccuracies before relying on the content in any high-stakes decision. We will correct factual inaccuracies on request.
We use models from third-party providers (currently including Anthropic, Inc.) under their respective commercial usage policies. We do not train AI models on your intake content; intake content is processed for the purpose of preparing your Deliverable and retained per the Sentinel Privacy Policy.
You represent and warrant that:
(a) You are authorized to engage Sentinel on behalf of your Practice or to enter into this agreement individually for the Service.
(b) The information you provide at intake — about your AI systems, vendor agreements, patient population, jurisdictional footprint, and governance posture — is true, accurate, and complete to the best of your knowledge.
(c) You will not use the Service to evade court orders, regulatory enforcement actions properly imposed by law, or contractual obligations to third parties (including but not limited to malpractice carriers and HIPAA business associates).
We may decline to deliver a Service, or refund a fee paid, if we determine in good faith that the Service is being requested for a purpose described in (c).
We never request, and you should never share with us, login credentials, passwords, two-factor codes, session tokens, or production access to your AI vendor systems. Any process that asks for these is a security risk; report it to us via the contact channel.
Identity-verification document parity rule. The same posture applies to identity-verification documentation required by any third party (e.g., regulatory submission, vendor verification, or platform-imposed identity verification frameworks). Where a Service prepares documentation referencing identity values, your Deliverable is drafted with placeholders ([LEGAL NAME], [TAX ID], [LICENSURE NUMBER], etc.); you fill those values in from your own records before submission. Sentinel does not request, collect, store, or transmit your government ID, passport, license documents, social security number, or any identity-verification documents.
You may not use any Sentinel Service:
Violation of this Section 6 is grounds for immediate termination of the Service without refund and may be reported to applicable regulators or law-enforcement authorities.
Pricing for each Service is set in the applicable Product Schedule. Payment is processed by Stripe (or, where a Schedule specifies, an alternative processor identified in that Schedule).
Where a Service has covered-scope criteria and your engagement falls outside coverage, refund mechanics are described in the applicable Schedule. Where a Service is delivered as scoped, fees are non-refundable absent our error.
Sentinel processes each intake and issues Deliverables within thirty (30) days of intake submission, absent (a) your written consent to extend or (b) Sentinel's written notification of a processing issue. If we miss that thirty-day window without (a) or (b), you may request a refund per the Schedule's refund policy. Contact via sentinelriskgrp.com/contact.
Absent extension by written agreement or Force Majeure Event, no engagement will exceed thirty (30) days from intake submission without entitling you to either (a) a written progress report explaining the delay and a revised timeline, or (b) refund per the Schedule's refund policy.
The AI Governance Shield™ Method, the certification framework, the six-domain governance model, the V3 deliverable structure, and all template structures, taxonomies, scoring rubrics, and methodologies are proprietary to Sentinel Risk Group, LLC and are protected by copyright, trade secret, and trademark law.
Each Deliverable is licensed to you for your Practice's own internal use, regulatory submission, carrier renewal, audit response, or similar legitimate purpose. You may not resell, redistribute, white-label, or use a Deliverable as a template for unrelated practices.
Trademarks referenced in our materials, including but not limited to Anthropic, OpenAI, Microsoft, Google, AWS, third-party AI products, and regulatory body names, are trademarks of their respective owners. Sentinel is not affiliated with, endorsed by, or sponsored by any of those parties unless expressly stated.
No regulatory outcome, carrier renewal outcome, audit outcome, litigation outcome, or other third-party decision is guaranteed by any Sentinel Service. Our Services produce evaluation, documentation, certification, and training; outcomes depend on your Practice's operations after delivery, the specific facts of any inquiry, the regulator or carrier or counsel involved, and many other factors outside our control.
We commit to delivering each Service according to the AI Governance Shield™ Method and the applicable Schedule. We do not commit to any specific third-party outcome.
To the maximum extent permitted by law, Sentinel's total cumulative liability arising from or related to any Service is limited to the fees you paid for the specific Service giving rise to the claim in the twelve (12) months preceding the claim, or as otherwise expressly negotiated in writing between you and Sentinel for a particular engagement.
In practice, "fees paid" generally means: (a) for in-progress engagements where only the deposit has been invoiced — the deposit; (b) for completed engagements — deposit + balance; (c) for repeat-customer relationships within the trailing twelve (12) months — the aggregate fees paid across those engagements.
For Enterprise or other custom-scoped engagements where you require a different cap as a condition of engagement, the cap can be negotiated and stated in the engagement letter or Statement of Work for that engagement. Any negotiated cap controls only for the engagement in which it appears.
We will not be liable for indirect, consequential, incidental, exemplary, punitive, or special damages, including loss of revenue, lost data, regulatory penalties, carrier non-renewal, or lost profits, even if advised of the possibility of such damages.
Some jurisdictions do not permit certain limitations of liability; in those jurisdictions our liability is limited to the maximum extent permitted by law.
You agree to defend, indemnify, and hold harmless Sentinel Risk Group, LLC, its officers, principals, employees, and agents from any claim, demand, loss, or expense (including reasonable attorneys' fees) arising from:
(a) your breach of these Master Terms or any applicable Schedule;
(b) information you provided that was false, misleading, or incomplete;
(c) your Practice's operational decisions, regardless of any Sentinel Deliverable;
(d) your violation of applicable law (including HIPAA, 42 CFR Part 2, state privacy statutes, FDA regulations, FTC requirements) or any third-party agreement (vendor agreement, carrier policy, payer contract).
Neither party shall be liable for any failure or delay in performance under these Master Terms or any applicable Schedule (other than payment obligations already due) caused by events outside that party's reasonable control, including without limitation: acts of God; natural disasters, severe weather, fire, flood, earthquake; war, terrorism, civil unrest, riot; government action, order, or change of law; pandemic or public health emergency; strikes or labor disputes; failure of public utilities, internet service, or third-party cloud, AI-model, payment, or messaging infrastructure providers (each a "Force Majeure Event").
The affected party shall use reasonable efforts to mitigate the impact of any Force Majeure Event and resume performance as soon as practicable. Performance commitments under these Terms or any Schedule are extended for the duration of the Force Majeure Event.
If a Force Majeure Event continues for more than thirty (30) consecutive days, either party may terminate the affected engagement on written notice; pre-paid fees attributable to undelivered work will be refunded within fourteen (14) days of termination.
These Master Terms, every Schedule, and any non-contractual matters arising out of or related to them are governed by the laws of the State of Florida, USA, without regard to conflict-of-laws principles.
Disputes between you and Sentinel must be brought in the state or federal courts located in Orange County, Florida. You consent to the personal jurisdiction of those courts.
Master Terms + the applicable Product Schedule + the Sentinel Privacy Policy + any executed Data Processing Addendum (where applicable) + any Cookie Policy or Acceptable Use Policy referenced from the Privacy Policy constitute the entire agreement between you and Sentinel with respect to the relevant Service. They supersede any prior or contemporaneous agreement.
If any provision is held unenforceable, the remainder remains in full force; the unenforceable provision will be enforced to the maximum extent permissible.
For customer data rights (access, correction, deletion, portability, opt-out) and the process for exercising them, see Privacy Policy § 8 Your Rights.
For questions about these Terms or any Sentinel Service, use the contact form at sentinelriskgrp.com/contact or the support page at sentinelriskgrp.com/portal-help.
This Schedule supplements the Master Terms above. Customer + Master Terms + this Schedule together govern AI Governance Shield certification engagements.
The AI Governance Shield™ certification is an independent third-party evaluation of your Practice's AI governance posture against the AI Governance Shield™ Framework's six domains:
Three tiers are offered:
| Tier | Scope | Typical price |
|---|---|---|
| Solo / Small Practice | 1–3 providers, 1 AI system | $3,500 |
| Group Practice | 4–20 providers, multiple AI systems | $8,000 |
| Enterprise | 20+ providers, multiple systems and locations | $25,000+ (quoted at intake) |
Tiers are not based on quality of evaluation (every engagement is evaluated against the same six domains and the same V3 deliverable framework). Tiers reflect engagement scope and depth required to meet a Practice of a given size and complexity.
Each engagement evaluates:
Each engagement does NOT evaluate:
Solo / Small Practice: $3,500 (1–3 providers, 1 AI system). Billed as 50% deposit at intake, 50% balance due before delivery of certification documents.
Group Practice: $8,000 (4–20 providers, multiple AI systems). Billed as 50% deposit at intake, 50% balance due before delivery of certification documents.
Enterprise: $25,000+ (20+ providers, multiple systems and locations); quoted at intake based on size and complexity. Billed as 50% deposit at intake, 50% balance due before delivery of certification documents.
Delivery timeline. Standard tier engagements typically deliver within approximately 5–20 business days of intake submission, based on package and scope. Enterprise timing is engagement-specific. In all cases, the outside boundary is thirty (30) days from intake submission, per the refund policy at H.4.
Outside boundary. Absent written agreement to extend or a Force Majeure Event (Master §12), no engagement under this Schedule will exceed thirty (30) days from intake submission without entitling you to refund per H.4 below.
Custom-scoped engagements: if your Practice requires depth beyond the published tier scope (e.g., 5+ AI vendors with bespoke contract terms, federal-program participation, multi-state regulatory mapping for >5 states, FDA-pathway AI products), the engagement will be quoted as Custom and an alternative delivery timeline will be agreed in writing.
Payment is processed by Stripe.
Refunds are issued in these circumstances:
Beyond these, fees are non-refundable. The Service is preparation-of-Deliverables under the Method; you cannot expect a refund based on a regulatory outcome you did not like, a carrier renewal that went badly, or a litigation result.
Each AI Governance Shield engagement includes an AI-assisted analysis phase followed by a qualified-reviewer validation phase before any Deliverable is issued.
Intake responses, vendor agreement text, and your provided evidence are processed using software including large-language-model tools (currently Anthropic models) directed by the AI Governance Shield™ Method to produce a structured first-pass analysis across the six domains.
The first-pass analysis is reviewed by a qualified Sentinel reviewer with healthcare governance, risk, or compliance background before the certification report and certificate are issued. The reviewer:
You receive only the reviewer-validated final Deliverable. No raw AI output reaches the Practice.
After evaluation, your engagement results in one of three outcomes:
The certification outcome reflects evaluation findings against the Framework. It does not reflect — and is not — a finding of compliance with HIPAA, state law, FDA regulation, or any other authority. See Master §3 and §9.
Certification is valid for twelve (12) months from the certificate Effective Date.
You receive renewal reminders at 90 days, 60 days, 30 days, 7 days, and on expiration day. Recertification is a new certification engagement at the then-current tier price. Sentinel Risk Group may, at its sole discretion, offer promotional renewal pricing from time to time; any such promotion is communicated separately and does not modify these Terms.
Without renewal, your certification lapses. The certificate mark on your Practice's website and marketing materials must be removed within thirty (30) days of expiration.
HIPAA scope: the Service evaluates governance over AI systems your Practice uses; it is not a HIPAA covered-entity activity in itself. Sentinel does not provide protected health information ("PHI") handling services; intake and evidence submission flows are designed so PHI does not flow to Sentinel. If PHI accidentally reaches Sentinel (e.g., via an evidence-upload screenshot containing patient identifiers), it is encrypted, isolated, retained per the AWS Business Associate Agreement framework Sentinel maintains with AWS for the fallback quarantine bucket, and destroyed per minimum-necessary record-review timing.
Synthetic test data — AI output verification: The AI-output verification step uses synthetic, fictitious test cases that contain no real protected health information (“PHI”) and describe no real patients. Every identifier in those cases — patient IDs, medical record numbers, names, dates, and facilities (e.g., “Synthetic City Memorial Hospital,” “Hypothetical State”) — is fabricated solely for AI-governance evaluation. You agree to run each assigned synthetic case through your AI tool only in a test, sandbox, or evaluation context, and to submit only that tool’s output for the assigned synthetic case; you must not submit real PHI, real patient data, or any production clinical record through this step. AI output you submit, and any content derived from these synthetic cases, are evaluation artifacts and must not be used to inform real patient care. Sentinel labels this content as synthetic — including a published manifest of case identifiers and hashes at sentinelriskgrp.com/synthetic-test-cases/manifest.json — so that it is identifiable as fictitious test data rather than PHI by you, by Sentinel’s service providers, and by any automated content- or abuse-detection system. If real PHI is nonetheless submitted, it is handled under the HIPAA scope provisions above.
BAA posture: the standard engagement does not include a Business Associate Agreement between Sentinel Risk Group, LLC and your Practice. The AI Governance Shield™ certification is a governance evaluation; the standard scope is designed so PHI does not flow to Sentinel. If your Practice’s privacy officer requires a signed Sentinel-customer BAA as a condition of engagement, you may execute one at any time via Sentinel’s self-service Business Associate Agreement page at sentinelriskgrp.com/baa. Sentinel's position is that the Services are designed to operate without PHI flow and that, as so designed, Sentinel is not a Business Associate of Customer in fact; execution of the BAA is offered out of an abundance of caution to satisfy Customer procurement requirements and is without prejudice to that position. See the BAA itself for full terms.
Multi-state practices: if your Practice operates telehealth or in-person care across multiple states, your engagement maps your jurisdictional footprint against enacted AI-related statutes in each state (Texas TRAIGA, Colorado SB 26-189 + HB 26-1139 + HB 26-1195, Illinois HB 3773, California SB 1120, NY S7263, plus federal and other-state requirements as applicable).
Behavioral health practices: if your Practice treats behavioral health, mental health, or substance-use disorder patients, the engagement automatically includes Schedule BH (Behavioral Health Overlay). No separate fee is added unless Schedule BH triggers custom-scoping.
This Schedule supplements the Master Terms and Schedule H. Customer + Master Terms + Schedule H + this Schedule together govern certification engagements for behavioral health Practices.
This Schedule applies if any of the following is true of your Practice:
If your Practice meets any of the above, the AI Governance Shield™ certification engagement runs Schedule H plus this Schedule BH overlay automatically. There is no separate fee for the overlay unless complexity triggers custom-scoping (see BH.5).
Beyond the HIPAA-aware framework in Schedule H.8, behavioral-health Practices have layered confidentiality obligations that the AI Governance Shield™ engagement evaluates:
Behavioral-health certification engagements include specialty variants of the standard V3 deliverable suite:
For Practices delivering behavioral-health services across multiple states (including telehealth), the certification engagement includes:
The Behavioral Health Overlay is included at no separate fee within the Schedule H tier you purchase, unless your Practice's specialty depth triggers custom-scoping. Triggers for custom-scoping include:
If custom-scoping is triggered, the additional engagement scope is quoted at intake before any deposit is taken. You may decline the custom scope and proceed under the standard Schedule H tier with the Practice's behavioral-health complexity flagged in the Conditional or Not-Certifiable outcome (rather than fully evaluated for Certified outcome).
You acknowledge that:
(a) Sentinel does not provide therapy, psychiatric services, behavioral-health treatment, or clinical supervision. All AI Governance Shield™ Deliverables are governance evaluation documents. Clinical care decisions and clinical supervision remain with your licensed providers and your Practice's clinical leadership.
(b) The certification does not authorize, license, accredit, or otherwise approve your behavioral-health Practice. State licensing, federal program participation, and accreditation (Joint Commission, CARF, etc.) are separate processes; AI Governance Shield™ certification does not substitute for any of them.
(c) Re-disclosure of certification documents to third parties (carriers, regulators, accreditors, attorneys) does not transfer Sentinel's evaluation findings to those third parties as a regulatory or legal opinion. Sentinel provides no legal opinion. See Master §3.
Disclaimer: The information on this website is provided for general informational purposes only and does not constitute legal, financial, insurance, or compliance advice. AI Governance Shield™ certification is an independent governance evaluation service and does not guarantee regulatory compliance, insurance coverage, legal protection, or immunity from enforcement actions. Applicable laws, regulations, and insurance policy terms vary by jurisdiction and are subject to change. Specific penalty amounts, enforcement provisions, and statutory requirements referenced on this site reflect publicly available information as of the date of publication and may have been amended. Practices should consult qualified legal counsel for advice specific to their circumstances. Sentinel Risk Group is not a law firm, insurance company, healthcare provider, or government agency.