IoT Global Awards 2023 WinnerApproved Government ICT Panel Supplier100% Australian Team
Arrochar Consulting
ARROCHAR CONSULTING
CONSULTING
One platform · 17 jurisdictions · 50+ frameworks

AI governance that survives the audit.In every jurisdiction you operate.

Sentinel ships as one platform with jurisdiction-specific framework packs. NSW AIAF, EU AI Act, Texas TRAIGA, Korea AI Basic Act, Japan AI Promotion Act, China's layered AI regime, and the rest — encoded as data, cross-mapped on day one. Available now for NSW councils; rapid expansion across Australia and globally.

Available now:🇦🇺 NSW Local Gov·In pipeline:🇦🇺 VIC · QLD · AU Private🇺🇸 USA🇪🇺 EU🇰🇷 Korea🇯🇵 Japan🇨🇳 China
The Pressure

The 2025 AG report didn't ask if you use AI. It assumed you do.

The NSW Auditor-General's 2025 Local Government report set the bar: a documented AI strategy, an inventory of every AI tool in use, transparency to residents, and per-use-case risk assessment under the NSW AI Assessment Framework.

Every council in NSW is reading it this year. None of them have eighteen months.

10%
Of councils have a centralised AI inventory
NSW AG Local Government report, 2025
128
NSW councils inside the next AG cycle
All of them, simultaneously
G0–G4
Approval gates per AI use case
Built into the platform end-to-end
7yr
Audit-trail retention by default
Records Management Act 1998 (NSW)
What's in the programme

Eight modules. One evidence trail. Every artefact the AG will ask for.

Sentinel mirrors the structure of a real council AI governance programme — built from a five-day sprint methodology designed for the audit, procurement and governance realities of NSW councils.

M1

AI Use-Case Register

Every AI tool, model and shadow use — classified, tagged, owned.

M2

AIAF Workpapers

Per-use-case NSW AIAF assessment, with privacy and records sign-off queues built in.

M3

AIRC Workflow

AI Review Committee charter, agendas, decisions, gates G0 through G4.

M4

Risk Register

Top AI risks, mapped to each use case, with mitigations, owners and review dates.

M5

Transparency Register

Resident-facing register on your council subdomain, generated from approved use cases.

M6

AG Gap Tracker

Pre-loaded with the 2025 AG findings — close them with owner, action, evidence.

M7

Evidence Vault + Audit Log

Append-only, hash-chained, 7-year retention. One-click auditor export.

M8

Re-attestation Engine

Annual re-approval cycles, drift prompts, automatic AIRC re-submission at G4.

How a use case flows

From shadow tool to signed-off pilot — in one flow.

Every AI use case passes through five gates. Sentinel runs the full path: intake, assessment, approval, monitoring, and annual re-attestation. Nothing slips through the cracks because nothing exists outside the system.

G0

Intake

Owner submits a short form. System assigns a provisional risk tier.

G1

AIAF assessment

Workpaper completed; privacy, records and risk sign-off captured.

G2

Pilot go-live

AIRC approves with conditions; evidence pack generated automatically.

G3

Scale or stop

Evidence reviewed against thresholds. Decision recorded with conditions.

G4

Re-attest

Annual delta workpaper. AIRC re-approves or sunsets the use case.

The Framework Engine

Frameworks as data. Cross-mapping for free.

The frameworks an auditor cares about — NSW AIAF, ISO 42001, NIST AI RMF, OECD principles, the AG findings — are encoded as data inside Sentinel, with stable IDs and explicit cross-maps.

When you assess a use case, Sentinel deterministically knows which clauses apply, what evidence each requires, and how to render the auditor's view. The workpaper, the AIRC pack and the evidence export are generated, not authored from scratch.

  • When AIAF v2 ships, your existing workpapers re-map automatically.
  • When VIC or QLD release their own framework, we ship a pack — no re-platform.
  • When the AG asks for evidence, it’s already structured the way they want it.
framework: NSW_AIAF_v1
clause: 3.2
title: "Per-use-case risk assessment"
applies_when:
  - risk_tier >= MEDIUM
required_evidence:
  - workpaper_signed_by_privacy
  - workpaper_signed_by_risk
cross_maps_to:
  - ISO_42001:2023#6.1.2
  - NIST_AI_RMF#MAP-2.1
  - OECD_AI#principle_1.2
  - AG_LG_2025#finding_4

A single clause definition — versioned, cross-mapped, machine-readable.

NSW AIAFISO/IEC 42001:2023NIST AI RMF 1.0OECD AI PrinciplesAG LG 2025PPIPAHRIPAGIPARecords Act 1998AU Voluntary AI Safety Standard
Sentinel by jurisdiction

One platform. Every framework. From NSW councils to the EU AI Act.

Sentinel ships as one platform with jurisdiction-specific framework packs. Available now for NSW local councils. Pipeline for VIC, QLD and the AU private sector. On the roadmap for the rest of the world — and the Framework Engine supports them from day one.

Private Sector — Australia & international

Sovereign by design

Your council's data stays in Australia. Full stop.

We built Sentinel for the procurement reality of NSW local government — not for US SaaS economics. Sovereign hosting, M365 SSO, IRAP-aligned controls, and tenancy isolation are part of the architecture, not an enterprise add-on.

AWS Sydney only

All tenant data resides in ap-southeast-2. Backups stay in-region. Never crosses a border.

IRAP-aligned controls

Built to IRAP control set from day one. ISO 27001 certification on roadmap.

M365 / Entra SSO

No local passwords. Your council's identity provider, your council's MFA policy.

Append-only audit log

Hash-chained, exportable, 7-year retention. The AG's questions answer themselves.

Per-tenant isolation

Schema-per-tenant by default. Single-tenant deploy option for tier-1 councils.

AU-only AI services

Any internal AI assist runs on Azure OpenAI AU East. Prompts never reach US endpoints.

Programme tiers

Priced for council IM&T budgets, not enterprise procurement.

Fixed-fee install + annual support. All tiers include unlimited users, full workspace, and quarterly framework updates. Choose the tier based on how hands-on you want Arrochar to be.

Foundation

fixed-fee install
$18,000

+ $6,000 / year support

  • All 8 modules installed and populated
  • 5-day Arrochar install sprint
  • Notion or Microsoft 365 edition
  • 12 months Slack / email support
  • Quarterly framework updates
Most common

Sprint+

fixed-fee install
$32,000

+ $9,000 / year support

  • Everything in Foundation
  • AIRC stand-up workshop
  • 2 follow-up coaching sessions
  • AG gap closure plan
  • Custom Transparency Register draft

Concierge

fixed-fee install
$55,000

+ $12,000 / year support

  • Everything in Sprint+
  • Arrochar runs your AIRC for 6 months
  • Monthly steering committee
  • Bespoke template extensions
  • Reserved for 3 councils in 2026

Multi-year and joint-procurement (e.g. ROC / shared services) discounts available.

Why Arrochar built this

Built by the consultants delivering the manual version today.

Sentinel started as a five-day sprint methodology and a four-to-six-week agentic AI pilot, designed for the procurement, governance and audit realities of NSW councils. Every module of Sentinel mirrors an artefact from Arrochar's existing AI governance consulting practice.

The platform exists so the next 127 NSW councils don't each have to rebuild the same workpapers from scratch.

“The whole methodology — inventory, AIAF workpapers, AIRC charter, transparency register, gap closure against the AG report — delivered in seven weeks of elapsed time, audit-ready.”

— Arrochar AI Governance Methodology

Methodology & Project Plan, Arrochar Consulting, 2026

7 wks
Methodology elapsed time
5 days
Phase 1 governance sprint
100%
AG findings mapped & owned
Design-partner programme · 3 councils · 2026

Be one of three councils that shape Sentinel.

The first three NSW councils to sign on get implementation discounts, lifetime founding-partner pricing, and a direct line to the team building the product.

Sentinel · Arrochar Consulting · sales@arrocharconsulting.com