BSA/AML risk assessments your examiners can trust.
A managed risk assessment service built for community banks. Your data in, an exam-ready assessment out. Every score documented, every formula transparent.
Runs on Snowflake · a platform independently audited for SOC 2 and PCI DSS
Four steps, one deliverable
From raw extract to exam-ready assessment. No software to install, no consultants in your conference room.
Validate
Run our Validator on your extract before anything leaves the bank. Catch gaps and formatting issues on your side of the wall.
Transfer
Encrypted SFTP upload, nothing to install. Your team sends one file over a channel your IT department already understands.
Process
Your data is scored on Snowflake, a platform independently audited for SOC 2 and PCI DSS. Every factor runs through the same documented formulas, every time.
Review
Log in to your portal, review the results, and download your exam binder PDF. Ready for your board and your examiners.
Your data's journey
Validated inside the bank, moved once over an encrypted channel, and scored on Snowflake, a data platform trusted by thousands of financial institutions. We are proud to use AI where it helps: narratives are AI-assisted, while every score comes from fixed, documented formulas you can reproduce and defend.
Click any block to see what it does.
A small desktop tool your IT team runs before anything is sent. It checks your extract against our published file spec and flags errors row by row. Data with problems never leaves the bank.
Validated files are transferred over an encrypted SFTP connection. Nothing is emailed and there is nothing to install beyond a standard SFTP client.
Your data is processed on Snowflake, a platform independently audited for SOC 2 and PCI DSS, with AES-256 encryption at rest, full audit logging, and strict per-institution data isolation.
Your team logs in over HTTPS with multi-factor authentication. View only: your data cannot be modified through the portal, and each institution sees only its own results.
Final rating, category scores, and factor-level drill-downs. Every number traces to a documented metric and threshold. Includes period-over-period trend views.
A complete, board-ready risk assessment document: executive summary, methodology, category narratives, factor detail, controls assessment, and a sign-off page for approval.
Download your full results as Excel or CSV at any time. Your data stays yours.
Why Sentinel
Built by people who have lived through BSA exams inside a bank.
Glass-box methodology
Every factor, threshold and formula is documented and reproducible. When an examiner asks how a score was calculated, you can show them. No black boxes.
Read the methodologyBuilt on standards
Built on the FFIEC risk categories and the inherent-controls-residual model used by Wolfsberg, COSO and ISO 31000, with residual scoring informed by the EU AMLA supervisory methodology. Every factor, threshold and formula is fully documented for your examiners.
Made for community banks
Priced and designed for institutions under $2B in assets. You get the rigor of an enterprise assessment without the enterprise bloat.
Who builds Sentinel
Sentinel is built by a financial crime technology specialist with hands-on BSA/AML compliance and data engineering experience inside a community bank. We build the tool we wished our own bank had: rigorous, transparent, and priced for institutions our size.
One deliverable: the exam binder
Everything your examiner expects, in the order they expect it. A single PDF you can hand across the table without a caveat.
- Executive summary. The one page your board actually reads, written in plain English.
- Methodology. How every score is built, from factor weights to residual thresholds.
- Category narratives. A written analysis for each FFIEC risk category, not just a number.
- Factor detail. Every data point, its source, and the score it produced.
- Controls assessment. Your mitigating controls, rated and mapped against inherent risk.
- Board sign-off page. A ready-to-execute approval page for your minutes.
Snowflake is our platform
Sentinel runs end to end on the Snowflake AI Data Cloud, the same platform thousands of financial institutions already trust with their most sensitive data. Snowflake's infrastructure is independently audited for SOC 2 and PCI DSS, and your data stays encrypted and isolated inside it.
- SOC 2 audited platform
- PCI DSS audited platform
- AES-256 at rest
- Per-institution isolation
AES-256 at rest
Your data is encrypted at rest, always.
TLS in transit
Every transfer is encrypted end to end.
MFA access
Multi-factor authentication on every portal login.
5-year retention
BSA-aligned record retention, by design.
Frequently asked questions
Who is this for?
Community banks and credit unions, typically under $2B in assets, that need a defensible BSA/AML risk assessment without hiring a consulting team or buying an enterprise platform. If your current assessment lives in a spreadsheet that one person understands, you are exactly who we built this for.
How does my data get to you?
You run our Validator on your extract inside the bank first, so you know the file is clean before it moves. Then you upload it over encrypted SFTP. There is no agent to install, no VPN to configure, and no direct connection into your core.
What do examiners see?
A complete exam binder PDF: executive summary, full methodology, category narratives, factor-level detail, controls assessment, and a board sign-off page. Every score traces back to a documented formula and a named data source, so there is nothing to reverse-engineer during the exam.
Do you support credit unions?
Yes. The methodology maps directly to credit unions. The same FFIEC-aligned risk categories apply whether your exam comes from the NCUA, a state regulator, or a federal banking agency.
How is this different from spreadsheets or legacy tools?
Spreadsheets break when the person who built them leaves, and their formulas rarely survive examiner scrutiny. Legacy tools score you inside a black box you cannot explain. Sentinel is a managed service with a glass-box model: you get expert-grade output, full documentation of every calculation, and none of the maintenance burden.