Security & trust

Before you choose,
review Defendria.

For IT teams in small and midsize organizations assessing Defendria: check what Sentinel processes, how access is scoped and which service terms apply.

A woman and a man reviewing a tablet beside an office window.

For your security review.

Data handling Access Accountability

Data handling

Know what
enters the platform.

The information processed depends on your deployed agents, enabled features, integrations and configuration. The product privacy policy describes these categories in detail.

Accounts & organizations
Business contact details, organization membership, roles, account settings and authentication-related information.
Endpoints & security activity
Device identifiers and reporting status, alongside the relevant process, file, network and detection information supplied by enabled features.
Investigations & actions
Alerts, investigation context, evidence, analyst notes, response status and audit records.
Integrations & support
Data sent to customer-configured destinations, delivery records, support communications and troubleshooting materials.

Access & accountability

Who can access
your workspace?

Check who will administer access and who can authorize response actions.

Organization context
Organization-scoped access associates customer records and permissions with the relevant Sentinel workspace.
Roles with distinct scopes
Permissions follow organization roles. Security operations, response, administration and billing have distinct access scopes.
Attributable actions
Authorized administrators can review recorded actions, the acting account, affected resources and reported outcomes. Use the record alongside investigation and response status.
Customer responsibilities
Your organization determines authorized users, configures access and integrations, and provides the notices and lawful basis required for monitoring its environment.

Processing arrangements

Providers, locations
and retention.

Review the processing roles, service providers and retention conditions for your deployment.

Your organization.
Defendria’s role.

For most customer-environment data, your organization is the controller and Defendria acts as processor. Defendria acts as controller for its own account, billing, support and service-administration purposes.

Review the processing agreement

Service providers
and data locations.

Operating the service involves infrastructure, communications, analysis and other providers. Processing may involve locations outside the EEA. Review the published subprocessor list and transfer provisions for the applicable arrangements.

Review service providers

Retention, return
and deletion.

Retention varies by data category, plan, settings and the applicable agreement. Return and deletion are governed by those terms, including applicable legal requirements and backup exceptions.

Read the retention policy

Talk to Defendria

Choose the right
contact channel.

Use the address that matches your request.

Ask sales a procurement question

Report a security concern

security@defendria.com

Report a suspected vulnerability affecting Defendria’s products or services.

What to include in a report
  • The affected product, component or page.
  • Steps to reproduce the issue and its potential impact.
  • Relevant timestamps and redacted supporting evidence.
  • A contact address for follow-up.

Keep credentials and customer data out of the initial email. Contact us to discuss how to share sensitive evidence.

Privacy & data processing

privacy@defendria.com

Questions about personal data, processing agreements or data requests.

Product support

support@defendria.com

Standard support hours are Monday–Friday, 09:00–18:00 CET/CEST, excluding Spanish public holidays, unless agreed otherwise. Published response times are targets.

Review support coverage