Privacy & Data Protection

A. Data You Provide Directly

B. Data Collected Automatically

C. Operational & Governance Data

The core value of SentryMandate lies in processing your operational data to enforce governance. This includes:

• Spend Records — Amount, provider, category, status, and timestamps for each agent spending request.
• Run Events — Sequence data, event types, token counts, and cost records for active agent runs.
• Loop Signals — Computed anomaly scores (repeat, error cycle, cost velocity, progress deficit) used by the Loop Guardian to protect against runaway agents.
• Interventions — Records of automated or manual actions taken to pause, throttle, or stop agent runs.
• Approval Decisions — Timestamped records of approved, denied, or escalated spend requests.
• Audit Logs — Immutable records of governance actions for compliance and accountability.

D. AI & Automation Processing

SentryMandate's Loop Guardian uses deterministic signal-processing algorithms (weighted scoring of four behavioral signals) to detect anomalous agent behavior. This is not machine learning or AI model inference.

• We do not train AI models on your data.
• We do not use your mandate or operational data to train, fine-tune, or improve any machine learning system.
• We do not send your operational data to third-party AI providers for processing. Vendor keys you store are used by your own agents — not by us.
• Anomaly detection is performed entirely within our infrastructure using deterministic algorithms with configurable thresholds that you control.

Processing Purposes

What We Never Do

• Sell, rent, or trade personal data to third parties.
• Use your operational data for advertising or profiling.
• Train AI or ML models on your mandate data, spend records, or execution logs.
• Share your data with other SentryMandate customers.
• Access your vendor API keys (encrypted at rest; we cannot read them).

We share data only in the following limited circumstances:

Service Providers (Subprocessors)

Each subprocessor is contractually bound to process data only as directed by us and to maintain appropriate security measures.

Legal & Safety Disclosures

We may disclose data if required to:

• Comply with a legal obligation, valid legal process, or enforceable government request.
• Protect the rights, property, or safety of SentryMandate, our users, or the public.
• Detect, prevent, or address fraud, security, or technical issues.

If legally permitted, we will notify affected users before such disclosure.

Business Transfers

In the event of a merger, acquisition, or asset sale, user data may be transferred as a business asset. We will provide notice before data is transferred and becomes subject to a different privacy policy.

Deletion

When you delete your account, we initiate removal of your personal data within 30 days. Some data may be retained in encrypted backups for a limited period or as required by law. Aggregated, anonymized data that cannot identify you may be retained indefinitely for product improvement.

Early Access & Backup Disclaimer

During the early access period, we recommend users maintain independent backups of critical mandate configurations and operational data. While we implement reasonable measures to protect data integrity, the Platform is under active development and data loss — while unlikely — cannot be guaranteed against.

We implement security measures appropriate to the sensitivity of the data we process:

Encryption

• In Transit — All connections use TLS 1.2 or higher. HSTS headers enforce HTTPS with a one-year max-age.
• At Rest — Vendor API keys encrypted using AES-256-GCM with keys derived via HKDF-SHA256. Passwords stored as irreversible Argon2 hashes.

Application Security

• Content Security Policy (CSP), X-Frame-Options, X-Content-Type-Options, and Referrer-Policy headers on all responses.
• CORS restricted to authorized origins. Localhost origins filtered in production.
• Request body limits (1 MB), concurrency limits (256 concurrent), and request timeouts (30s) to prevent abuse.
• Idempotency protection on mutating operations (SHA-256 deduplication, 24-hour TTL).
• Rate limiting on authentication (login attempts per IP and email) and API key usage (120 spend checks per minute per key).

Access Control

• JWT-based authentication with mandatory JTI (token identifier) for revocation capability.
• API keys authenticated via SHA-256 fast index followed by Argon2 verification.
• Kill switch capability for immediate, user-initiated freeze of all agent spending.

Limitations

No system is perfectly secure. While we implement industry-standard protections, we cannot guarantee absolute security against all threats. Users are responsible for safeguarding their own credentials, API keys, and access tokens. If you believe your account has been compromised, contact us immediately.

Depending on your jurisdiction, you may have the following rights regarding your personal data:

How to Exercise Your Rights

Submit requests via our contact form. We will respond within 30 days. If we need additional time (up to 60 days for complex requests), we will inform you of the extension and the reasons.

Appeal Mechanism

If you are unsatisfied with our response to your request, you may appeal by contacting us with additional details. You also have the right to lodge a complaint with your local data protection authority.

Children's Privacy

SentryMandate is not directed at individuals under the age of 16. We do not knowingly collect personal data from children. If we become aware that we have collected data from a child, we will delete it promptly.

Do Not Track

SentryMandate does not use tracking cookies, advertising pixels, or behavioral profiling. We honor Do Not Track signals by default because we do not track users across third-party websites.

California Residents (CCPA/CPRA)

If you are a California resident, you have the right to:

• Know what personal information is collected and how it is used.
• Request deletion of your personal information.
• Opt out of the sale of personal information. We do not sell personal information.
• Not be discriminated against for exercising your privacy rights.

International Users

SentryMandate is operated from the United States. If you access the Platform from outside the US, your data may be transferred to and processed in the United States. By using the Platform, you consent to this transfer. We rely on appropriate safeguards (including contractual protections with our subprocessors) to ensure your data is protected in accordance with this Policy.

To be explicit:

• You are the data controller. You decide what mandates to create, what budgets to set, and what governance rules to enforce. We execute your instructions.
• We are the data processor. We process your Mandate and Operational Data solely to provide the Platform's services as instructed by you.
• We claim no rights to your strategic configurations, spending policies, agent architectures, or any intellectual property embedded in your mandate definitions.
• Logging for service integrity only. We may retain minimal execution metadata (timestamps, aggregate counts, error states) for debugging, security monitoring, and service reliability. This is never used for competitive purposes.

If you delete your account, your mandate data and execution logs are removed in accordance with our retention policy. We do not retain copies for our own use.

We may update this Policy from time to time. When we make material changes:

• We will update the "Last Updated" date at the top of this page.
• For significant changes, we will notify registered users via email or an in-platform notification.
• Continued use of the Platform after notification constitutes acceptance of the updated Policy.

We encourage you to review this Policy periodically. Previous versions are available upon request.