# Solutions for Governments

Government agencies and public sector organizations answer to a different set of requirements than a commercial business: statutory compliance, mandatory accessibility for every citizen, data sovereignty, and procurement that favors software your agency can own and operate indefinitely — not a subscription to a third party's cloud that your data has to pass through.

[ALTCHA Sentinel](/docs/sentinel/) is built around exactly that constraint. It's a self-hosted platform you deploy and run entirely on infrastructure your agency controls, with perpetual licensing available so the software remains an asset you operate — not a service you rent.

## Compliance by Design

ALTCHA is built to simplify — not complicate — your compliance posture.

**Data protection regulations.** Because Sentinel runs entirely on your own infrastructure, with no third-party processing, no subprocessors, and no cookies or tracking, it removes most of the complexity that data protection law adds to third-party services. See [GDPR Compliance](/legal/compliance/gdpr/) and [HIPAA Compliance](/legal/compliance/hipaa/) for how this applies in practice — the same self-hosted, no-subprocessor model applies regardless of which jurisdiction's law you're accountable to.

**Privacy by architecture, not policy.** No cookies, no fingerprinting, no persistent visitor tracking. Sentinel identifies devices using [Ephemeral Device Keys](/docs/sentinel/security/privacy-protection/) — non-persistent identifiers that rotate daily — and anonymizes or discards verification logs automatically. Compliance doesn't depend on someone remembering to enforce a retention policy; it's the default behavior.

**Audit-ready access control.** [SSO via OIDC or LDAP/Active Directory](/docs/sentinel/security/sso/), multi-factor authentication, and per-account, role-based access ([Admin, Member, Read-only](/docs/sentinel/configure/users-accounts/)) let Sentinel plug into your agency's existing identity provider and access policy, with an audit trail of who can do what.

## Accessibility Compliance

Public sector websites are frequently under the strictest accessibility obligations of any sector — and CAPTCHA is one of the most common places those obligations get broken.

ALTCHA's widget is built to [WCAG 2.2 AA](/legal/compliance/wcag/) from the ground up: full keyboard navigation, screen reader-optimized descriptions, an audio alternative to the visual challenge, and valid, ARIA-compliant markup. This is the same accessibility benchmark referenced by accessibility regulations worldwide, including the EU's [European Accessibility Act (EAA)](/legal/compliance/eaa/) and comparable public-sector accessibility mandates elsewhere.

Where a traditional CAPTCHA forces every visitor through a visual puzzle, ALTCHA's proof-of-work challenge is invisible to almost all legitimate users by default — accessibility and usability reinforce each other instead of trading off.

## Platform Ownership

**Perpetual licensing.** ALTCHA supports perpetual licensing options, so the software your agency deploys remains an asset it can operate and control — not a subscription that stops working, or a service that can change terms, the day a contract lapses.

**Self-hosted, on your infrastructure.** Deploy Sentinel on your own servers, private cloud, or on-premises infrastructure — [Docker](/docs/sentinel/install/docker/), [Kubernetes](/docs/sentinel/install/kubernetes/), [AWS](/docs/sentinel/install/aws/), [Azure](/docs/sentinel/install/azure/), or [Bunny](/docs/sentinel/install/bunny/) — against your own PostgreSQL, MySQL, Oracle, or other supported database. Nothing about running Sentinel requires an external service to function.

**Air-gapped deployment.** Offline license verification via `LICENSE_JSON` is supported for environments that can't or won't allow outbound call-home traffic — a common requirement for classified or otherwise isolated networks.

**Built for scale and continuity.** [Clustering](/docs/sentinel/operations/clustering/) runs multiple Sentinel replicas against shared state, including multi-regional deployments, so protection stays available and consistent across a large or distributed agency without depending on any single instance.

**Open-source core.** The underlying widget and verification protocol are open source and auditable — your security team can review exactly what's running, rather than taking a vendor's word for it.

## What Sentinel Includes

* Adaptive CAPTCHA, WCAG 2.2 AA accessible by default
* Interaction-based, contextual, and machine-learning bot detection
* Real-time threat intelligence and proxy/TOR detection
* Spam and content classification, phishing and link detection
* Context-aware, multi-layer rate limiting
* SSO (OIDC, LDAP/Active Directory), MFA, and role-based access control
* Perpetual licensing and air-gapped/offline deployment support
* Clustering and multi-regional high availability
* Self-hosted deployment with Docker, Kubernetes, AWS, Azure, Bunny, and more

## Getting Started

1. **[Introduction to Sentinel](/docs/sentinel/)** — how it works and what it adds over open-source ALTCHA.
2. **[Integration Checklist](/docs/sentinel/integration-checklist/)** — a launch-readiness checklist before going to production.
3. **[Install](/docs/sentinel/install/)** — deploy on your infrastructure of choice.
4. **[SSO](/docs/sentinel/security/sso/)** and **[Users & Accounts](/docs/sentinel/configure/users-accounts/)** — wire up your identity provider and access policy.
5. **[Privacy Protection](/docs/sentinel/security/privacy-protection/)** — the technical detail behind ALTCHA's compliance posture.

For procurement or licensing questions specific to public sector deployments, see [Pricing](/pricing/) or [contact us](/contact/).