Sentinel by Genesis — a private, end-to-end encrypted contract operations desktop app. Scroll to tour instant contract analysis, the AI clause editor, lawyer-ready redlines, the on-device insights engine, the privacy model, team workspaces, customization, and the AI assistant.

Sentinel

Your contracts, finally on your side.

A Windows desktop app for teams that live on agreements — construction firms, record labels, agencies. It reads the fine print, scores the risk, rewrites the bad parts, and never lets a deadline slip. All of it end-to-end encrypted, on your machine.

0–100risk score, seconds
AES-256end-to-end encrypted
100%on-device insights
3themes, your accent
Sentinel
Operate
Dashboard
Repository
Intake
Edited Docs 3
Pipeline
Intelligence
Alerts 2
Renewals
Counterparties
Playbook
Clause Library
Compare
Workspace · Meridian Build Co.Dashboard
Search 48 contracts…
Contracts
0
Portfolio health Stable
0/100
↑ 4 since last quarter
Open exposure
$0uncapped liability
6 flagged clauses
Deadlines
Acme MSA auto-renews 12 days
Harbor lease notice window opens 31 days
Vendor NDA expires 88 days
Pipeline
Legal review
Approvals
Signed
01 Instant analysis

It reads the fine print. In seconds.

Drop in a PDF or DOCX and Sentinel grades the whole agreement 0–100 — executive summary, critical issues, missing clauses, unusual language, compliance gaps, financial obligations, and how every term stacks up against your industry's benchmarks.

Master service agreement acme-msa-2026.pdf · 14 pages

…8.1 The Contractor shall complete all works described in Schedule A no later than the Completion Date. Payment terms are set out in Schedule B.

9.2 Renewal pricing may be adjusted at the sole discretion of the Contractor.

11.4

14.1 This obligation survives termination for a period of three (3) years.

One click. No reading required.
risk score
Missing: limitation of liability Auto-renew · 90-day notice trap Unusual: one-sided termination Compliance: GDPR clause absent
Clause detail

Run the analysis, then tap a highlighted clause.

Sentinel highlights every risky passage right in the document. Click one to see why it's flagged, how it benchmarks, and what the negotiation coach suggests.

Also extracted: financial obligations · tasks · deadlines · signature status · auto-category
02 AI clause editor

Rewrite the risk away.

Any clause, six ways: simplify it, neutralize it, make it favor you, swap in the standard version, or have it explained like you're fifteen. Every rewrite arrives as a suggestion you approve — nothing changes without you.

Six rewrite modes

Simplify · rewrite · make favorable · neutral tone · explain like I'm 15 · standard clause.

Approve, don't autopilot

Rewrites land as cards you accept or dismiss — the document never changes behind your back.

Speaks your playbook

Company-approved language from your clause library is used first, so rewrites sound like you.

"The Client's liability under this Agreement shall be unlimited, and the Contractor shall indemnify the Client against all losses howsoever arising."
Simplified
✓ Queued in Edited Docs
03 Redlines & Edited Docs

Lawyer-ready redlines, minus the lawyer hours.

Approved rewrites become tracked changes. Accept or reject each one, then export a clean .html redline or a revised .txt from the Edited Docs outbox — ready to send back across the table.

Redline preview — acme-msa-2026

8.1 The Contractor shall complete all works by the Completion Date. The Client's liability under this Agreement shall be unlimited The Client's total liability shall not exceed the fees paid in the twelve (12) months preceding the claim, and each party shall indemnify the other against losses arising from its own negligence.

9.2 This Agreement shall automatically renew for successive twelve (12) month terms may be renewed by mutual written agreement, with pricing agreed in advance.

11.4 The Contractor may terminate at any time upon seven (7) days' notice Either party may terminate for convenience upon thirty (30) days' written notice.

Cap the liability. Unlimited exposure → 12-month fee cap.
Kill the auto-renew. Silent rollover → mutual opt-in renewal.
Balance termination. One-sided exit → 30 days, both parties.
3 changes pending review
04 Insights engine · 100% on-device

Your whole portfolio, understood.

Health scores, dollar exposure, vendor profiles, renewal radar, negotiation simulation, executive briefs — every insight computed deterministically on your machine. No cloud required, no tokens spent, no data shared.

Portfolio health
0/100
Weighted across risk, coverage, deadlines and signature status. Watchlist: 3 agreements dragging the score.
Open exposure
$0
Uncapped liability + auto-renew commitments across 6 flagged contracts, priced clause by clause.
Renewal radar
Acme MSA renegotiate save ~$18k/yr
Harbor lease notice window 31 days left
Nova license consolidate save ~$6k/yr
Negotiation simulator
SoftHardball
Vendor profile
Acme Corp
4 agreements · avg risk 71 · always pushes uncapped liability · settles at 30-day termination when pressed. Full relationship timeline inside.
Executive brief
One click turns 48 contracts into a paragraph your CEO will actually read.

Also in the engine: auto-generated playbooks from your portfolio · clause benchmarking · relationship timelines · full contract drafting from a questionnaire, seeded with your approved clause language.

05
Privacy is the product

Your contracts never leave your side.

On your PC, the vault is sealed with Windows security (DPAPI). In the cloud, your workspace is one AES-256-GCM blob whose key is derived from a company code that never leaves your devices. Genesis can't read your contracts. Neither can anyone else.

PBKDF2 · 310,000 iterations → AES-256-GCM
Key derived from your company code: V7WS-M2ZX
Rotating re-encrypts the workspace and locks out the old code instantly.

Local vault, Windows-sealed

Everything on disk is encrypted through DPAPI — tied to your Windows account, opened only over a hardened IPC bridge.

The server sees ciphertext. Only.

A business workspace syncs as one end-to-end-encrypted document. No plaintext, no metadata mining, nothing to leak.

The key is yours, shown once

Your 8-character company code is displayed a single time at creation. Rotate it whenever someone leaves — old key, dead instantly.

AI on your terms

The assistant only ever sees extracted clause summaries — never full contracts. Or type "off" and it runs 100% on-device.

06 Workspaces

Solo today. Whole crew tomorrow.

Start personal and local-only — you don't even need an account. When the team's ready, one Genesis login and one company code puts everyone in the same encrypted workspace.

Personal

Sign in with a Genesis account — or skip sign-in entirely. Your data never leaves the machine either way.

Local-only · zero setup

Business · Employer

Register the business and Sentinel mints your 8-character company key. Share it with the crew, rotate it whenever you want.

Creates the workspace

Business · Employee

Sign in, enter the company key, and the shared workspace decrypts on your device. Roles keep approvals with the right people.

Joins with the code
One code is the whole ceremony. No SSO project, no IT ticket, no seat licenses to babysit. The code is the encryption key material — which is exactly why only your team ever holds it.
V7WS-M2ZX
Set up for your trade

Pick an industry at setup and Sentinel tunes its categories, departments, and what the analyzer watches for. Click one to preview.

07 Customization

Make it unmistakably yours.

Three themes — liquid glass, dark, light — plus your accent color, UI scale with true native zoom, compact density, corner radius, motion level, even which side the AI dock lives on. Try it on the live preview.

SharpRound
SentinelPreview
Contracts
48
Health
82
At risk
6
Renewals
3

Preferences live in your encrypted device vault — every teammate gets their own look on the same shared workspace.

08 AI assistant

Ask your contracts anything.

A docked assistant that's cloud-connected out of the box — grounded in your portfolio, tuned for short straight answers that cite the exact clause they came from. Scope it to one contract, the whole portfolio, or your playbook. Suggestions arrive as cards you approve.

Works on day one

No API keys, no setup — real LLM answers through the Genesis cloud the moment you install.

Private by construction

Only extracted clause summaries are ever sent — never a full contract. Type "off" and it runs entirely on-device.

Bring your own horsepower

Point it at your own worker for the full-strength analyst — long streamed answers on llama-3.3-70b.

What's my biggest risk in the Acme MSA?
And then some

Every corner, considered.

The features that don't get a chapter — but get used every day.

PDF & DOCX intake

Drag in real-world files — text extraction runs locally, then analysis fires instantly.

Obligation → task

Every "shall deliver by" becomes a tracked task with an owner and a date.

.ics deadline export

Renewals and notice windows drop straight into Outlook or Google Calendar.

Signature tracking

Draft, sent, partially signed, executed — status lives on every contract card.

Smart search

Search across every clause of every contract at once — not just file names.

Side-by-side compare

Two contracts, clause-aligned — spot what changed between versions or vendors.

Pipeline board

Six stages: Draft → Legal Review → Manager & Executive Approval → Signed → Archived. Drag to advance.

Playbook rules

Require or forbid language company-wide — every upload is graded against your rules.

Clause library

Save your best language once; approved clauses power rewrites and drafting.

Self-arranging widgets

The dashboard packs itself — resize a widget and the grid reflows densely around it.

Alerts that matter

Auto-renewals, notice windows, expiries — acknowledged alerts stay out of your way.

Self-updating

One click in Settings rebuilds and relaunches the app on the newest version.

Draft from a questionnaire

Answer a few questions → a first-draft services agreement, NDA, subcontract or sales contract, built from your approved clauses.

Clause benchmarking

Every clause graded stricter / aligned / lenient versus the market, with how common each posture actually is.

Relationship timeline

Every contract, renewal, negotiation and approval with one counterparty on a single chronological thread.

Negotiation email draft

Turn the critical issues into a ready-to-send revision request addressed to the counterparty — offline, in one click.

Tech specs

Under the glass.

Platform
Windows 10 / 11 desktop. Electron with a sandboxed, context-isolated renderer and a strict content-security policy.
Engine
Vite 7 · React 19 · TypeScript. Native-zoom UI scaling, three themes, per-device preferences.
Analysis
Deterministic clause engine. Detects 25+ clause types (liability, renewal, indemnity, payment, IP, plus construction and entertainment terms) and scores risk by weighting each finding — high 25 · medium 10 · low 2, summed and capped at 100 (≥55 high, ≥25 medium). Runs fully on-device with no model call.
Local vault
Windows DPAPI via Electron safeStorage — contract data on disk is encrypted with keys tied to your Windows account.
Workspace sync
End-to-end encrypted. One AES-256-GCM document per company; key derived from the company code with PBKDF2 (310,000 iterations). Server stores ciphertext only.
Accounts
Genesis account — one login across Genesis apps. Personal mode works fully offline with no account at all.
AI
Cloud-connected by default (Genesis worker), on-device analyst mode, or your own Cloudflare Worker running llama-3.3-70b. Only clause summaries leave the machine — never full text.
File formats
In: PDF, DOCX. Out: .html redlines, revised .txt, .ics calendar files.
Insights
Deterministic, on-device. Health, exposure, benchmarks, vendor profiles, renewal radar, negotiation simulation, executive briefs, playbook generation, contract drafting.
Coming soon from Genesis

Be first through the glass.

Sentinel is in final development. Get on the waitlist and we'll hand you early access the moment it ships.