Plain-language data guide
What Sentinel collects
What Sentinel collects, where it goes, and how long we keep it
Updated 22 October 2026. This is the plain-language version of our Privacy Notice (https://www.isdevopro.com/privacy). If the two ever differ, the Privacy Notice is the one that counts.
The short version
- The agent on your server is read-only. It sends information out; it never accepts commands and cannot change anything.
- We never read your source code. For your apps' libraries we send only the names and versions of packages.
- Logs can hold private details, so secrets are removed on your server before anything is sent, and you can switch logs off for any server.
- Everything is stored on one server in Johannesburg, South Africa. We say so openly because some organisations need to know.
- Old data is deleted automatically (table below).
- We do not sell data, do not use it for advertising, and do not use it to train AI models.
What the agent sends, and what we do with it
Server health
CPU, memory, disk, load, number of processes, container status and resource use
Server: 90 days. Containers: 30 days
Remove the agent
Container logs
New log lines written by your containers. Passwords, tokens, keys, card numbers and similar secrets are removed first, and email addresses are shortened (a***@example.com)
7 days
Yes: per server in the portal (also deletes what is stored), or start the agent with -no-logs so logs never leave the server
Web request summaries
From your reverse proxy's access log: method, path, status, time taken, visitor IP address. Passwords or tokens in the address are removed
14 days
Yes, with log collection (they come from the logs)
Open ports
Which network ports are listening and whether they face the internet
14 days
Remove the agent
Running processes
Process name and command line, with secret-looking arguments blanked
14 days
Remove the agent
Server security checks
Updates waiting, restart needed, SSH settings, firewall on or off, number of failed SSH logins in a day, installed package names and versions, versions of server software (PHP, Node.js, nginx and so on)
Only the newest report
Remove the agent
App libraries
Names and versions of packages found in lock files (composer.lock, package-lock.json, requirements.txt, Gemfile.lock, go.mod and similar), with the project folder. Never the files themselves or any code
Only the newest report
Remove the agent
| What | Details | Kept for | Can you turn it off? |
|---|---|---|---|
| Server health | CPU, memory, disk, load, number of processes, container status and resource use | Server: 90 days. Containers: 30 days | Remove the agent |
| Container logs | New log lines written by your containers. Passwords, tokens, keys, card numbers and similar secrets are removed first, and email addresses are shortened (a***@example.com) | 7 days | Yes: per server in the portal (also deletes what is stored), or start the agent with -no-logs so logs never leave the server |
| Web request summaries | From your reverse proxy's access log: method, path, status, time taken, visitor IP address. Passwords or tokens in the address are removed | 14 days | Yes, with log collection (they come from the logs) |
| Open ports | Which network ports are listening and whether they face the internet | 14 days | Remove the agent |
| Running processes | Process name and command line, with secret-looking arguments blanked | 14 days | Remove the agent |
| Server security checks | Updates waiting, restart needed, SSH settings, firewall on or off, number of failed SSH logins in a day, installed package names and versions, versions of server software (PHP, Node.js, nginx and so on) | Only the newest report | Remove the agent |
| App libraries | Names and versions of packages found in lock files (composer.lock, package-lock.json, requirements.txt, Gemfile.lock, go.mod and similar), with the project folder. Never the files themselves or any code | Only the newest report | Remove the agent |
What we check from outside
Websites, ports and pings you ask us to check, and the result: up or down, response time, status code, or a short reason it failed (90 days). For a "word on a page" check we read the start of the page to find the word and do not keep the page.
Cloud accounts you connect
Read-only: names, settings and health of resources, and cost on plans that include it. For AWS you can connect without a secret key (a role that trusts Sentinel). Any other credential you give us is stored encrypted. Cost history is kept as long as you have an account.
Who else sees any of it
Oracle Cloud (Johannesburg)
Hosts Sentinel and its backups
Everything above, stored on its servers
Groq
Writes the plain-language explanation of an alert
The alert text and related details for that alert
Telegram, and your Slack, Teams, Discord or webhook
Deliver your alerts
The alert text
Resend
Sends our emails
Your email address and the email
Paystack
Takes payment
Your name, email and payment details (we never see card details)
OSV.dev
Tells us which package versions have known flaws
Package names and versions only. Nothing that identifies you or your server
Netlify, Plausible
Serve the web app, count visits without cookies
Normal web request details, anonymous counts
| Who | Why | What they receive |
|---|---|---|
| Oracle Cloud (Johannesburg) | Hosts Sentinel and its backups | Everything above, stored on its servers |
| Groq | Writes the plain-language explanation of an alert | The alert text and related details for that alert |
| Telegram, and your Slack, Teams, Discord or webhook | Deliver your alerts | The alert text |
| Resend | Sends our emails | Your email address and the email |
| Paystack | Takes payment | Your name, email and payment details (we never see card details) |
| OSV.dev | Tells us which package versions have known flaws | Package names and versions only. Nothing that identifies you or your server |
| Netlify, Plausible | Serve the web app, count visits without cookies | Normal web request details, anonymous counts |
How it is protected
Per-server keys; read-only agent; secrets encrypted; each organisation can only ever see its own data; outside checks are limited to public internet addresses; sign-in with optional two-factor.
What we have not got yet
We are a small team. We have not yet had an independent security audit or penetration test, we do not hold SOC 2 or ISO 27001 certification, and our hosting is outside Nigeria. A Nigeria-hosted mode for organisations that need it is planned, not available. We will say here when each of these changes.
Your choices
Switch logs off per server in the portal. Ask us to export or delete your data at info@isdevopro.com; we answer within 30 days.