Data Processing Addendum
This DPA supplements the Terms of Service between Sentinel Fort Group (processor) and the customer (controller) for the processing of personal data via the Sentinel platform.
Last updated: July 10, 2026.
1. Definitions
"Personal Data", "Processing", "Controller", "Processor" and "Data Subject" have the meanings set out in applicable data protection law (including India's DPDP Act and the EU GDPR).
2. Scope and roles
- The customer is the Controller of personal data uploaded into its Sentinel workspace.
- Sentinel acts as the Processor and only processes personal data on documented instructions.
- Sentinel's subprocessors act as sub-processors under this DPA.
3. Nature and purpose of processing
Sentinel processes personal data to provide the CRM, Marketplace, Voice, KIE and BI modules, to secure the platform, to support the customer, and to comply with law.
4. Categories of data and data subjects
- Data subjects: customer's employees, agents, leads, buyers, tenants and channel partners.
- Categories: contact details, communication records, property preferences, KYC references, transaction data, uploaded documents and call recordings (where enabled).
5. Security measures
Sentinel maintains the technical and organisational measures described on our Security page, including encryption in transit, encryption at rest, RLS-based tenancy isolation, RBAC, audit logging and vulnerability management.
6. Sub-processors
Sentinel uses vetted sub-processors for hosting, database, email, analytics and AI inference. A current list is available on request from privacy@sentinelfort.com. Customers may object to new sub-processors on reasonable grounds.
7. International transfers
Where personal data is transferred outside the customer's jurisdiction, Sentinel applies appropriate safeguards, such as standard contractual clauses, in line with applicable law.
8. Data subject requests
Sentinel will assist the customer in responding to data subject requests using the admin tools in the console and, where necessary, through targeted support requests.
9. Breach notification
Sentinel will notify the customer without undue delay after becoming aware of a personal data breach affecting the customer's data, and will provide the information reasonably required for the customer to meet its own notification obligations.
10. Deletion and return
On termination, Sentinel will delete or return customer personal data within 60 days, unless retention is required by law.
11. Contact
To execute this DPA or request the current sub-processor list, write to privacy@sentinelfort.com.