SovereignShieldFREE
Upgrade to Pro
USER GUIDEHOW TO USE SOVEREIGNSHIELD

Platform User Guide

Everything you need to know to evaluate your compliance posture, scan for vulnerabilities, and export cryptographic ledgers.

1. Inspection Matrix & Checklists

The core of SovereignShield is the Compliance Inspection Matrix, available on the homepage dashboard. It lists actionable technical safeguards across multiple frameworks including GDPR, HIPAA, EU AI Act, and India DPDP.

  • Review Controls: Check each mandate's developer-focused implementation details (e.g. Consent Management, Right to Erasure, Activity Audit Logs).
  • Toggle Status: Click the checkbox next to a control to mark it as implemented. Your progress is saved locally using Zero-Cloud architecture.
  • Matrix Tabs: Further down the page, explore the deep-dive Inspection Matrix which categorizes controls into Application Security, Data Privacy, Infrastructure & Cloud, and Organizational Policies.
  • Telemetry Gauge: Monitor your real-time compliance score (0-100%) as you toggle controls.

2. Exporter Engine & Cryptographic Ledgers

Generate tamper-evident audit reports directly from your browser.

  • Scroll to the Exporter Engine section on the dashboard.
  • Click Export Verified Ledger (JSON) to download a machine-readable compliance state.
  • Click Generate Auditor PDF to export a human-readable report.
  • All exports are cryptographically signed with a SHA-256 hash to prove authenticity.

3. Live Domain Security Scanner

SovereignShield includes a built-in Domain Scanner to evaluate live production environments.

  • Use the Domain Scanner widget at the top of the dashboard.
  • Enter your production URL (e.g., https://your-app.com).
  • The tool performs heuristic checks for SSL/TLS, security headers (CSP, HSTS), and cookie configurations (HttpOnly, Secure).

4. CI/CD & Diagnostic Tools

Integrate compliance into your development lifecycle.

  • CI/CD Pipeline: Copy the provided GitHub Actions workflow from the CI/CD section to automate compliance scanning on every pull request.
  • Diagnostic Wizard: Generate custom CLI commands to debug local environment configurations and security dependencies.
  • Sprint Roadmap: Convert your uncompleted matrix controls into actionable Jira/Linear ticket descriptions.

5. Public Trust Center & Vendor Risk

Establish trust with your clients and assess third-party vendors.

  • Trust Center (View): Generate a standalone HTML Trust Center and export AI Master Prompts to auto-fill SIG/CAIQ security questionnaires.
  • Legal Generator: Draft zero-telemetry Privacy Policies, Terms of Service, and Data Processing Agreements.
  • Vendor Risk (TPRM) (View): Evaluate sub-processors and external APIs against GDPR Article 28 requirements.

6. Zero-Cloud Architecture & Device Sync

SovereignShield is built on a strict "Zero-Cloud / Local-First" design philosophy. No telemetry or compliance data is ever transmitted to external servers.

  • Data Portability & Encrypted Backups: Use the Export sovereignshield.json button to download your entire state (Checklists, Vendor Audits, Notes, and License). WebCrypto AES-GCM allows you to password-protect the export, generating a secure .shld vault.
  • Custom Notes: Keep sensitive internal audit notes natively in your browser. Click on any control to open the sliding drawer and access the Custom Notes tab.
  • Peer-to-Peer Sync: Migrate data directly between a desktop and mobile device using the P2P Device Sync tool. SovereignShield establishes a direct WebRTC data channel using QR codes—meaning data transfers instantly over your local network without ever touching a cloud database or signaling server.
  • Cryptographic License: Even Pro licenses are validated offline. Upon purchase, you receive a cryptographically signed JWT that your browser verifies against a bundled public key, completely removing the need for phone-home license checks.