01. N · 00°00'
The foundation

The foundation.
What we actually run.

The Boundary explains why the perimeter is the product. This page is what lives inside it — the hosted infrastructure, the operations layer, and the disciplines that hold them together.

Anchor facility
Dallas, TX
DAL/01 · operational
Extension
New Jersey
EWR/02 · build-out
Operations posture
On-call
Named principal · 24/7
Inference
Self-hosted
NVIDIA GPU · inside boundary
02. N · 18°00'
The two-layer model

Infrastructure layer, operations layer.
Everything we run lives in one of these two.

The infrastructure layer is the hosted foundation we own — Dallas, New Jersey, the GPUs inside. The operations layer is what runs on top of it: workflows and applications we build inside our boundary, cloud services we administer on our clients' behalf (Microsoft 365, including M365 for Government, and the major cloud platforms our clients use), and the human operators who run all of it. Different surfaces, one operating discipline.

Layer 01

Infrastructure.
The hosted foundation.

The physical perimeter our clients hand a BAA to. Power, cooling, building controls, network, compute, the GPUs that run inference workloads, and the hosted desktops where our operators do their work.

  • Anchor datacenter · Dallas, TX
  • Extension facility · New Jersey · build-out
  • NVIDIA GPU footprint · sized for VDI and inference
  • Hosted VDI · per-tenant VLAN isolation
  • Backup · DR posture
Layer 02

Operations.
What we run, where it sits.

The operational layer reaches across surfaces. Workflows and applications we build run inside our boundary. Cloud services we administer on our clients' behalf run on the major cloud platforms our clients have chosen. Either way, the operators are ours.

  • Identity · access
  • Workflow orchestration
  • Data layer · relational + vector
  • Private AI · self-hosted inference
  • Monitoring · alerting · on-call
  • Knowledge · documentation
  • Cloud services administration · M365 + hyperscale
  • Client SaaS integration · EHR, RCM, ERP, accounting
  • Fleet management
03. NE · 45°00'
Anchor · Dallas, TX

Anchor facility.
The foundation, on the record.

A spec sheet for the technical reader. Posture-level, not part-number-level — hardware refreshes; the posture doesn't.

Location
Dallas, TX
Our anchor datacenter. Facility-level relationship is operational, not part of the brand — we may consolidate, expand, or relocate without notice.
Compute
NVIDIA GPU footprint · VDI + inference
GPUs sized for two workload types: hosted desktop with vGPU/passthrough where the work requires it, and self-hosted model inference. CPU, RAM, and storage envelope refreshed as the platform evolves.
Network
Per-tenant VLAN isolation
Each client lives on a dedicated VLAN. Controlled ingress/egress. Public internet exposure is deliberate and minimal — not a default.
VDI delivery
Hosted desktops · vGPU where needed
Workstations are published from inside the boundary. GPU acceleration available for workloads that warrant it. Identity-bound, geography-aware sessions.
Backup · DR
Daily · weekly · off-site
Daily database backups, weekly off-site exports. RTO and RPO are scoped per engagement to match the workload, not the brochure.
What it is not
A hyperscaler.
On purpose. We are not AWS, Azure, or GCP. The point of the perimeter is that it has an edge an auditor can walk.
An auditor can walk into this facility. That sentence is the whole reason it exists — everything else on this page is downstream of it.
04. E · 75°00'
Extension · New Jersey

Extension facility. Coming online.

The East Coast extension. The foundation, not a second anchor.

Build · In progress
EWR/02
New Jersey.

The East Coast extension of the boundary. Build-out underway; not in production until it is.

Why an extension. Three reasons, in order.

  • Proximity East Coast clients want their operators on the same coast they are. Network round-trip and human time-zone overlap both improve.
  • Redundancy Geographic separation for clients whose continuity plans require it. Not a multi-region active-active claim — a real second site.
  • Framework drift Emerging compliance frameworks (state, federal, sector-specific) are introducing regional separation requirements. The extension lets us answer those without rearchitecting.
05. SE · 110°00'
What runs on the foundation

Nine systems.
Operated, not just deployed.

Standing up software is not operating it. For each system below: what it is, where it runs, who operates it, what it produces. Microsoft 365 ecosystem components are named — trust posture is in the brand. The operational tooling underneath is described by capability, because implementations evolve.

01
Identity · access.
Microsoft Entra ID with Conditional Access. MFA enforced; device posture and geography evaluated at session establishment. The "who, what, when" question has a single answer because there is a single identity plane.
StackMicrosoft Entra ID · Conditional Access
WhereInside boundary · per-tenant scoping
OperatedPrincipal-on-call
ProducesAuditable session logs
02
Hosted VDI.
Workstations published from the anchor facility. GPU-accelerated where the workload requires it. Per-tenant isolation — your team's desktops live where your data lives, not in their living rooms.
StackVDI Blade · vGPU / passthrough
WhereDAL/01 · per-tenant VLAN
OperatedInternal ops
ProducesSession logs · recoverable state
03
Workflow orchestration.
A self-hosted workflow engine — the operational glue that makes RevOps work move. Scheduled jobs, source-system integration, retry logic, observability. Workflows are version-controlled and exported as code.
StackSelf-hosted orchestration
WhereInside boundary
OperatedEngagement principal
ProducesRun logs · evidence
04
Data layer.
A relational data layer with vector search alongside it for retrieval-augmented workflows. Three-layer schema convention for RevOps engagements (raw → staging → curated). Audit logging baked in.
StackRelational + vector index
WhereInside boundary
OperatedEngagement principal
ProducesCurated datasets · lineage
05
Private AI · inference.
Self-hosted models running on the NVIDIA GPU footprint inside the boundary. Regulated workloads do not call third-party model endpoints. Provider-agnostic on the frontier-model side for non-regulated workloads; routed to whichever model is cheapest and best for the job, under a BAA where one is required.
StackSelf-hosted inference · NVIDIA GPU
WhereInside boundary
OperatedInternal ops
ProducesZero egress · logged calls
06
Monitoring · alerting.
Runtime error capture, silent-failure detection on scheduled jobs, end-to-end uptime checks. Alerts route to a Microsoft Teams channel the on-call principal is paged into. The system does not assume "no errors" means "everything works."
StackRuntime + silent-failure detection
WhereInside boundary
OperatedOn-call rotation
ProducesPages, ack'd in seconds
07
Knowledge · documentation.
A self-hosted knowledge platform at wiki.sentineledge.io, Entra-gated, per-engagement collections. The operational memory of every engagement — runbooks, architecture decisions, evidence references. Daily backups, weekly JSON exports.
StackSelf-hosted wiki
Wherewiki.sentineledge.io
OperatedInternal ops
ProducesAuditable history
08
Cloud services administration.
What we administer on our clients' behalf, outside our hosted boundary. Microsoft 365 (including M365 for Government) tenant administration — Entra ID, Conditional Access, Teams, SharePoint, OneDrive, mail. Hyperscale cloud environments (AWS, Azure) operated as our clients' existing footprint, with full visibility and change history before we agree to operate anything.
StackMicrosoft 365 + M365 Gov · hyperscale cloud
WhereClient tenants · cloud accounts
OperatedEngagement principal
ProducesChange history · audit trail
09
Fleet management.
Endpoint and workstation fleet management for our own people, operated alongside commercial tooling. Patch posture, device inventory, compliance state.
StackFleet management · commercial
WhereEndpoints · internal
OperatedInternal ops
ProducesPatch · posture state
06. S · 150°00'
By practice

What we operate, by practice.

A capabilities statement, not a pitch. No named clients. No named third-party products in the source-system lists — categories instead, because integration patterns evolve and we will not lock the page to today's vendors.

Practice 01

Healthcare RevOps.

HIPAA-aligned

Integrated source systems

Across clinical EHR, workforce management, ERP/financial, revenue cycle, and ancillary therapy platforms. We operate the integration foundation; vendor specifics live in discovery and gated technical references.

Operational outputs

  • Punch-edit audit pipeline
  • RevOps dashboards
  • Billing automation
  • Month-end close acceleration

Integration foundation

  • Workflow orchestration on our hosted infrastructure
  • Relational data layer with audit logging
  • Operational dashboards inside the boundary

Engagement posture

  • Multi-year contracts
  • CFO-level stakeholder ownership
  • Full RevOps build-out inside the boundary
Practice 02

CMMC Compliance.

L2 · audit-ready

Environment posture

  • CMMC L2 audit-ready environments
  • Per-contractor VLAN isolation
  • Hosted VDI · identity-bound sessions

Compliance artifacts

  • SSP and POA&M operated as living documents
  • Continuous monitoring · evidence collection pipeline
  • Audit support through certification

Engagement posture

  • Audit-ready environments standing today
  • Audit-completed clients under operation
  • Active multi-contractor engagements
Architectural depth and engagement specifics: see Technical References below.
07. SW · 200°00'
What we don't operate

What we don't operate.

The line between what fits the model and what doesn't isn't about revenue. It's about whether we can run it well.

We don't operate what we can't see end-to-end.

We administer Microsoft 365 tenants and client cloud environments where we have full visibility — logs, change history, telemetry. "Co-managed" arrangements with fuzzy accountability are not on the menu. We own it, or we don't.

We don't operate clients who aren't on our hosted infrastructure.

The filter is strategic fit, not revenue or tenure. Operating without owning the perimeter means accepting blast radius we can't price.

We don't operate "lift and shift" without the operations layer.

Hosting without operations is rack-and-stack. That's not what we sell. If you want a colo provider, we know good ones — and we are not one.

We don't operate clients we can't be on-call for at 2am.

Deliberately small. Every engagement has a named principal who actually runs the operation. We don't grow the team to win work we can't operate well.

08. S · 180°00'
Operational posture

Operational posture.

Deliberately small team. Every engagement has a named principal — the person who built the integration is the person on the phone when it's misbehaving. No project coordinators between the work and the operator.

On-call posture: when the boundary slips, the phone rings to us. We do not subcontract the 2am page to a tier-one queue. The 2am principle isn't a slogan; it's a constraint on what we sign up for.

We don't grow the team to win work we can't operate. Headcount is a function of operable engagements, not the other way around.

09. W · 250°00'
Technical references · gated

Technical references. Gated.

For prospects evaluating the foundation seriously, we publish technical reference architectures covering the operational patterns underneath each practice. These are not marketing collateral — they are working architecture documents reviewed before release.

Available Reference architecture · 01

Healthcare RevOps Reference Architecture.

Operating an integrated multi-location healthcare RevOps stack inside a HIPAA-aligned boundary.

Covers the multi-source integration pattern, the workflow orchestration and data layer foundation, the punch-edit audit pipeline as a worked example, and the economics of operating versus integrating.

Request the technical paper Reviewed · sent within one business day
Build · In progress Reference architecture · 02

CMMC L2 Hosted VDI Reference Architecture.

Coming soon.

Forthcoming. Covers per-contractor VLAN isolation, identity-bound VDI session establishment, SSP/POA&M operational discipline, and the continuous evidence collection pipeline. We are not committing to a delivery date until we have one to commit to.

Status: drafting
11 — Start here

If your stack is regulated,
your CFO is the buyer,
and you're tired of vendors who hand you a thing and leave

Let's have a real conversation. Discovery calls are with a principal, not a sales rep. Bring the workflow that's eating your team alive, and we'll tell you honestly whether we're the right shop to fix it. If we're not, we'll tell you that too.