Subprocessors

Sentrail sends redacted code excerpts, schema metadata, and finding text to a model provider to triage findings and draft fixes. We use enterprise or API endpoints configured so that submitted content is not used to train the provider's models.

Secrets, connection strings, and access tokens are stripped before any prompt is sent. If you would rather not use a hosted model at all, contact us about self-hosting the agent runtime.

• We review the vendor's security documentation and any available third-party audit report before onboarding.
• We execute a data processing agreement with equivalent obligations to the ones we owe you, including EU Standard Contractual Clauses where transfers require them.
• We grant the narrowest access that the integration needs and prefer vendors that support scoped, revocable credentials.
• We remove a vendor when it is no longer needed and revoke its credentials at that point.

We will give at least thirty (30) days' notice before a new subprocessor begins processing customer personal data, by updating this page and emailing account administrators who have subscribed to change notices. If you reasonably object on data protection grounds, contact privacy@sentrail.dev within that window and we will work with you or, failing a resolution, allow you to terminate the affected subscription and receive a pro-rata refund as described in our Data Processing Addendum.