Data Processing Agreement

This is a starting template. Enterprise customers will execute a finalized DPA reflecting the final US operating entity and applicable law. Contact us to request the executable version.

1. Roles

You (the customer) are the controller of end-user personal data. The Sentry is the processor (or “service provider” under CCPA), processing data only on your documented instructions to provide the platform.

2. Categories of data

End-user account details, location and alert data necessary for duress and check-in functionality, and incident records generated through use of the platform.

3. Purposes and instructions

We process data solely to deliver, maintain, and secure the platform, and to comply with legal obligations. We do not sell personal data, and we do not use it for our own commercial purposes beyond providing the service.

4. Security measures

• Encryption in transit (TLS) and at rest.
• Role-based access controls and least-privilege access.
• Audit logging of access to sensitive data.
• Regular security review and incident response procedures.

5. Subprocessors

We use reputable subprocessors for infrastructure, hosting, and email delivery, under written agreements imposing equivalent security and confidentiality obligations. A current subprocessor list is available to enterprise customers on request.

6. Data subject / consumer requests

We assist you, as far as technically possible, in fulfilling data subject or consumer requests (access, deletion, correction) regarding data we process on your behalf.

7. Data return and deletion

On termination, we return or delete your data in accordance with your agreement and applicable law, subject to any legal retention requirements.

8. Audits

We provide reasonable cooperation and information to demonstrate compliance, and make available security documentation on request to enterprise customers under NDA.

9. Contact

To execute a DPA or request documentation, contact our sales team or email [email protected].