Sentra maintains an internal Information Security Program (ISP) covering both our products and our general business practices. It implements technical and organizational security measures across our product environments and company systems — including access controls, employee training, physical security, network and cloud security, encryption, credential and key management, and secure software development. Additional information is available at trust.sentra.io.
SOC 2 Type 2
Sentra undergoes an annual SOC 2 Type 2 audit against the AICPA Trust Services Criteria to verify the safeguards applied to customer data and how well those controls operate. Our report is available upon request under NDA.
ISO/IEC 27001:2022
The Standards Institution of Israel certifies that Sentra operates an Information Security Management System (ISMS) conforming to ISO/IEC 27001:2022. Issued May 12, 2025; valid through May 15, 2028.
Platform Architecture
Sentra is a cloud-native Data Security Platform with security built in as a first principle. Scanners are typically deployed inside the customer's cloud with read-only permissions, and customer data never leaves its region — all analysis happens where the data was discovered. Sentra connects via cloud-native APIs with no agents to deploy, and supports both Sentra-owned and customer-owned scanner accounts. All data is encrypted at rest with AES-256 and in transit with TLS 1.2 or higher. Our team follows a strict secure SDLC with peer review, SAST and SCA scanning, and annual third-party penetration testing. A full platform security architecture document is available upon request.
Infrastructure Subprocessors
The infrastructure providers that support delivery of the Sentra platform.
Amazon Web Services
EU/US · Hosted services
Microsoft Azure
EU/US · Hosted services
Google Cloud Platform
EU/US · Hosted services
MongoDB
EU/US · Database service
Datadog
EU/US · Internal log collection (no user info)
WorkOS
EU/US · User authentication
Pylon
EU/US · Support ticketing system
Sentra Ltd.
ISR · Support
Trust
Lasting partnerships are built on trust
Explore Sentra's certifications, security program, and platform architecture in full detail.