Governance
Compliance & Ethics
Intelligence and security work is only as good as the controls around it. These are the standards Sentinel Meridian applies to its engagements, its people, and its data.
Governance
Engagements are scoped in writing, reviewed against the firm's conduct standards, and declined where the requested activity falls outside lawful or ethical boundaries. Analytic output is separated from commercial pressure by design.
Government contracting controls
The firm maintains contracting discipline appropriate to public-sector work — written scope, traceable deliverables, conflict-of-interest screening, and records retention. Any specific registrations, set-aside status, or contract vehicles are confirmed in writing on request rather than asserted here.
Export control (ITAR / EAR)
Technical services, training content, and hardware integration are reviewed against applicable U.S. export-control obligations, including ITAR and EAR analysis where relevant, before delivery or transfer. Where a licence or exemption analysis is required, it is completed before work begins.
Cybersecurity and CUI readiness
Client material is handled under access-controlled, least-privilege practices with encryption in transit and at rest. The firm is building toward controlled-unclassified-information handling readiness; current control status is provided to clients in writing and is not represented here as a certification.
Accounting and audit readiness
Time, expense, and deliverable records are maintained so engagements can withstand client or government audit. Segregation of client funds and documented change control apply to all contracted work.
Personnel vetting
Personnel and partners are vetted proportionate to the sensitivity of the engagement, including identity, background, and reference verification, with re-verification on role change. Clearance eligibility, where relevant, is confirmed per engagement.
Lawful use of force and human rights
The firm does not provide offensive capability. Protective and training work follows lawful use-of-force principles and applicable international human-rights standards, and personnel are instructed to refuse unlawful direction.
Host-nation licensing
Work conducted outside the United States is performed under applicable host-nation permissions and licensing, coordinated with the client and, where required, local counsel.
Data handling
Collection is limited to what an engagement requires. Retention periods are defined per engagement, subscriber data is processed only for the notifications requested, and client identities are treated as confidential by default.
Statements on this page describe operating standards and readiness posture. They are not claims of certification, accreditation, or government approval. Documented status is provided in writing under engagement.
