For IT teams in small and midsize organizations assessing Defendria: check what Sentinel processes, how access is scoped and which service terms apply.
The information processed depends on your deployed agents, enabled features, integrations and configuration. The product privacy policy describes these categories in detail.
Accounts & organizations
Business contact details, organization membership, roles, account settings and authentication-related information.
Endpoints & security activity
Device identifiers and reporting status, alongside the relevant process, file, network and detection information supplied by enabled features.
Investigations & actions
Alerts, investigation context, evidence, analyst notes, response status and audit records.
Integrations & support
Data sent to customer-configured destinations, delivery records, support communications and troubleshooting materials.
Access & accountability
Who can access your workspace?
Check who will administer access and who can authorize response actions.
AccountResourceOutcome
Organization context
Organization-scoped access associates customer records and permissions with the relevant Sentinel workspace.
Roles with distinct scopes
Permissions follow organization roles. Security operations, response, administration and billing have distinct access scopes.
Attributable actions
Authorized administrators can review recorded actions, the acting account, affected resources and reported outcomes. Use the record alongside investigation and response status.
Customer responsibilities
Your organization determines authorized users, configures access and integrations, and provides the notices and lawful basis required for monitoring its environment.
Processing arrangements
Providers, locations and retention.
Review the processing roles, service providers and retention conditions for your deployment.
Your organization. Defendria’s role.
For most customer-environment data, your organization is the controller and Defendria acts as processor. Defendria acts as controller for its own account, billing, support and service-administration purposes.
Operating the service involves infrastructure, communications, analysis and other providers. Processing may involve locations outside the EEA. Review the published subprocessor list and transfer provisions for the applicable arrangements.
Retention varies by data category, plan, settings and the applicable agreement. Return and deletion are governed by those terms, including applicable legal requirements and backup exceptions.
Standard support hours are Monday–Friday, 09:00–18:00 CET/CEST, excluding Spanish public holidays, unless agreed otherwise. Published response times are targets.