Support & Help Center

Product & platform

What exactly is Sentrix?

A RegTech platform for regulated payments: real-time risk decisioning, sanctions/PEP/adverse-media screening, alert & case operations, and an append-only audit trail — one auditable system rather than stitched-together tools. It is a technology vendor product, not a licensed financial institution.

What are the four modules?

Decisioning engine (rules + risk scoring, sub-second verdicts with reason codes), Screening pipeline (sanctions, PEP, adverse media, ongoing monitoring), Case operations (queues, investigation, disposition, escalation), and Audit & governance (append-only decision and override records with evidence export). See /product.

Does Sentrix file suspicious-activity reports for us?

No. Sentrix runs the operational workflow up to the reporting decision; your MLRO makes the suspicious-activity determination and files the SAR/STR with the FIU. Sentrix is the tooling — regulatory accountability stays with your institution.

Can we author our own rules?

Yes. Rules and thresholds are authored and tuned by your risk team to encode your own risk appetite; they are versioned so you can show which policy produced which decision.

Sandbox, onboarding & integration

How do I get started?

Request a briefing and sandbox access from the contact page. You'll get a workspace to configure decisioning rules, connect sandboxed screening providers and run cases end to end. See /enterprise for the full onboarding path.

What's the difference between sandbox and live?

The sandbox is a non-production environment where screening and decisions are simulated for evaluation and integration. Sandbox results must not be used for real compliance decisions. Live use runs under your Order Form with production providers connected.

How do we integrate?

Via a workspace-scoped REST API — a Bearer key on each request, JSON in and out, a few endpoints (decisions, cases, dispositions). Your engineers call the decisioning endpoint from onboarding and payment flows. Full reference at /docs.

How do I connect real screening providers?

In production, connect your chosen identity, sanctions, PEP and adverse-media providers under your own regulated program. Providers sit behind reviewed adapters; our team helps with provider selection and configuration.

Are there webhooks?

Not today — webhooks are on the roadmap. The current API is request/response; poll the cases endpoint for updates. We do not advertise a webhook surface that does not exist.

Security & data

How is our data protected?

Encryption in transit (TLS 1.2+) and at rest (AES-256), per-workspace logical isolation, server-enforced RBAC, Argon2 password hashing and opaque server-side sessions. Full detail on the Information Security page; the documentation package is on the Enterprise page.

Where is data hosted, and can we choose the region?

The platform runs on Vercel with Neon Postgres in a single primary region today. Customer-selectable data residency, including UAE-region hosting, is on the roadmap and not yet generally available — talk to us about your requirement and timeline.

Do you have SOC 2 or ISO 27001?

Our control framework is aligned to SOC 2 and ISO 27001 practices, and formal third-party attestation is in progress and on our roadmap. We do not claim certifications we do not yet hold or display badges we have not earned; we're happy to walk security teams through the controls.

Is the audit log tamper-proof?

It is append-only — the application writes audit entries and never updates or deletes them — and structured as examiner evidence. Cryptographic tamper-evidence (hash-chaining / WORM export) is on the roadmap; we describe it that way rather than claiming it is shipped.

How do we report a vulnerability?

Email security@sentrix.world with reproduction detail and follow the Responsible Disclosure Policy; we operate a safe-harbour commitment for good-faith research.

Commercial & procurement

How is Sentrix priced?

The full engine is free in sandbox. Operate starts from $4,000/mo for live decisioning, screening, case ops, audit export and SLA support. Institution is custom for banks and licensed processors. See /pricing.

Do you complete security questionnaires and provide a DPA?

Yes. Send questionnaires to compliance@sentrix.world or security@sentrix.world; the DPA and full documentation package are available to review before signature. See /enterprise.

What are the service levels?

Operate and Institution plans include a support SLA with response targets by severity; the specific availability and response commitments are set in the Order Form and service schedule for your plan.

Which legal entity do we contract with?

The Sentrix service contracts through a United Arab Emirates entity within the OnyxOne Group. The registered particulars are shown on each legal document and completed on execution of an Order Form.

Contact routes

Need	Contact
General & briefings	Book a briefing
Product support	support@sentrix.world
Procurement & security review	Enterprise & procurement
Security & vulnerability reports	security@sentrix.world
Privacy & data rights	privacy@sentrix.world
Compliance & AML queries	compliance@sentrix.world
Complaints	complaints@sentrix.world
Abuse reports	abuse@sentrix.world
Legal notices	legal@sentrix.world

More resources

• Platform overview — the four modules, workflows and how Sentrix fits your stack.
• Use cases — how PSPs, EMIs, acquirers and cross-border teams operate in Sentrix.
• Documentation — API reference with authentication, endpoints and examples.
• Enterprise & procurement — security review, DPA package, deployment model and onboarding.
• System status — live operational status and health endpoint.
• Trust Center — security, compliance and legal in one place.
• Complaints & Dispute Resolution — how to raise and escalate a concern.

Evaluating Sentrix and not sure where to start? Book a briefing and we'll set you up with sandbox access and a walkthrough.