How it works

From paper binder to defensible record. In 30 days.

Funeral Sentry goes live by location, not by feature toggle. Most independent homes are fully migrated inside three weeks. Multi-location groups roll out one region at a time, on a schedule we set with you.

01The 30-day shape

Four phases. One operating record.

Each phase has a deliverable. By day 30 you have a working compliance system of record per location — not a project plan that says you started one.

/ 01Onboard

Map every location.

We import your existing GPLs, scan your staff records, configure your state license overlays, and assign roles. One location at a time, or all at once for groups.

DAY 1 – 7
Deliverables
  • GPL / CPL / OBCPL imported and version-numbered
  • Staff roster mapped to the role matrix
  • State license overlays configured per location
  • Auth invitations sent to OWNER + MANAGER seats
/ 02Configure

Set your rules of record.

Define your disclosure workflows, renewal cadences, retention periods, and escalation paths. Every funeral home runs slightly differently — the platform adapts.

DAY 7 – 14
Deliverables
  • Disclosure delivery requirements per interaction type
  • Retention windows by state and document class
  • Escalation rules for HIGH-severity risk flags
  • Approval workflow for published GPL versions
/ 03Monitor

Continuous, by default.

From the day you go live, every arrangement generates a record. Every staff member’s training is tracked. Every regulatory change flows to your obligations.

DAY 14 — ONWARD
Deliverables
  • Compliance score recalculated nightly per location
  • Risk flags fire on missing proof, stale GPLs, lapsed training
  • Weekly summary email to OWNER + MANAGER roles
  • AI review available on every published GPL version
/ 04Defend

When the audit comes, you’re ready.

Whether it’s an FTC inquiry, a state board review, or a plaintiff’s discovery request — your records are sealed, signed, and exportable in minutes, not days.

DAY 1 — ALWAYS
Deliverables
  • Audit packet exports a sealed JSON / PDF manifest
  • Hashed integrity logs trace every state change
  • Cross-tenant access is impossible by service design
  • Platform-admin support sessions are themselves audited

02What the platform refuses to do

Three principles that make the record defensible.

A compliance product that uses cheerful language is a compliance product you can't take into a deposition. We chose the boring, evidentiary path on purpose.

Citations or escalation

AI that names its source.

Every AI finding cites a specific price item or disclosure key from your GPL. If the citation doesn’t match the source, the finding is downgraded to ESCALATE and waits for a human.

Manual close on HIGH

Risk flags that don’t self-clear.

LOW and MEDIUM risk flags auto-resolve when the underlying data is corrected. HIGH and CRITICAL flags require a human to acknowledge and close — even after the data passes.

Published is immutable

Versioning, not editing.

A published GPL version cannot be silently changed. Corrections create a new version with a full diff against the prior. The historical record is the legal record.

03What the system actually does

Every record carries provenance.

A document folder is not an audit trail. A spreadsheet is not a versioned price list. Here is what the platform writes to disk on a normal Tuesday.

Event

Every business action is audited

Actor, action, entity, organization, location, request id, IP, user-agent. Append-only — the platform itself never deletes or updates an audit row.

Hash

Document integrity is verifiable

Evidence files stored under tenant-prefixed keys. Audit packet exports include the document hash so receipt can be proven without trusting our database.

Lineage

GPL versions diff against prior

Each published version stores its parent. The diff (price additions, removals, percentage changes) is preserved separately so reviewers can audit deltas, not just snapshots.

Citations

AI findings link to source rows

A finding cites a specific price item by ID or a disclosure by FTC section. Reviewers click through to the original record, not a paraphrase.

Tenancy

Cross-tenant reads are impossible

Service-layer guards reject any query that lacks an organization id. A misdirected read returns 404 with zero information leak about whether the row exists in another tenant.

Retention

Data belongs to the operator

Full export at any time — JSON, CSV, sealed PDF. Cancellation does not gate your records. Compliance data follows the funeral home, not the vendor.

Start with one location

The 30-day audit is the fastest way to see it on your own data.

Load one location. We'll audit the GPL, score every disclosure, surface the gaps, and hand back a readiness report. Keep the report whether you continue or not.