IT security practices and client agreements: You're handing someone the keys. Here's who, and on what terms.
A managed IT provider gets admin on everything you own. We think that means the contract, the security practices and the people behind them should all be public before you ever talk to us.
Who you're dealing with
SentinelGrid is a software company and managed IT provider with headquarters in downtown Orlando, Florida, a location in Sanford in Seminole County, and service hubs in Jupiter, Florida, and Laurel Park, North Carolina. There is no sales layer and no account manager between you and the people doing the work: whoever scopes your environment is accountable for supporting it. Contractors and technicians are being brought on under a published vetting process, and you are told by name who has access to your systems before they have it. Every agreement names SentinelGrid as the counterparty, and the Terms of Service, Privacy Policy and Managed IT Service Terms are published and versioned.
- Business
- SentinelGrid Managed IT
- Locations
- Headquarters in downtown Orlando, Florida; a location in Sanford, Florida; service hubs in Jupiter, Florida, and Laurel Park, North Carolina, USA
- Serving
- On-site and remote, wherever you are
- Governing law
- Florida
- support@sentinelgrid.us
- Response
- One business day, by a person
Agreements you can read first
Plain-English contracts with a one-line summary under every heading. Both are blank templates you can read before the audit, and both say in writing what's built and what isn't. The copy you sign is signed in the client portal, which records who signed, when and from where.
Security practices, published
Passwordless single-use sign-in links, HMAC-signed sessions, no public sign-up anywhere, admin surfaces reachable only over a private Tailscale network, secrets in a vault, everything deployed from version control, remote sessions logged by name. Every third party that touches data is listed, with what it sees and where it is.
Regulated data, handled properly
If you handle health records, card data, criminal-justice information or student records, there's a signed addendum for it that allocates responsibilities, and we keep that data out of our systems until it's signed. The addendum doesn't make you compliant; it makes clear who does what.
Your data stays yours
Network diagrams, runbooks, inventories, credentials, the audit itself: all yours, kept current, handed over in a usable format on exit. We are your data processor and act only on your instructions, and we will never withhold your own data over a billing dispute.
Incidents: told within 72 hours
If something happens to your data on our watch, your primary contact hears from us without delay and within 72 hours of confirmation. You get what happened, what was affected and what we did, and we help with any notice you have to make under Florida's FIPA, HIPAA or PCI DSS. Contractors must report any suspected incident to us within 24 hours.
Vetted people, named to you
Everyone who works on a client environment is identity-verified, reference-checked, technically assessed and bound by a signed contractor agreement before access is issued. Access is per engagement, least-privilege, and revoked when the work ends.
Leave whenever you like
Month to month, 30 days' notice, no exit fee. On the way out you get documentation and credentials, we remove our agents, and we help whoever comes next.
Privacy, by the current law
Our legal pages were rewritten against the law as of August 2026: twenty state privacy laws, an appeal process, Global Privacy Control honoured on every page, breach-notice deadlines with numbers in them.
AI: used to build, never on your data
Much of our software and documentation is written with AI development tools and shipped by a named person who stays accountable. Client data (tickets, credentials, configs, monitoring output) never goes into an AI tool without your written agreement, AI never answers your ticket, and no decision about a person is automated.
Insurance
We recommend every client carries cyber-liability insurance, because our services reduce risk; they don't transfer it. On request we tell you in writing what insurance we carry.
Existing clients: the Client Portal
One sign-in for raising and tracking tickets, your private status page, your documentation and the agreements you've signed. Sign-in is a single-use emailed link, so there is no password to remember or leak.
Could a scammer send email as your business?
Find out in seconds. Type your domain and get a free letter grade for how easy it is to fake, with exactly what to fix. No sign-up.