LEGAL
Privacy Notice
EFFECTIVE: JANUARY 2026
Sentinel Authority operates the sentinelauthority.org website and the ODDC attestation platform. This policy describes how we collect, use, and protect your information.
INFORMATION WE COLLECT
INFORMATION YOU PROVIDE
Contact information (name, email, phone, organization)
Application data (system descriptions, ODD specifications, technical documentation)
Account credentials for the attestation portal
Payment information (processed by third-party providers)
COLLECTED AUTOMATICALLY
ENVELO Interlock telemetry data from systems undergoing assessment
Log data (IP address, browser type, pages visited)
Cookies for session management
HOW WE USE YOUR INFORMATION
Process and evaluate assessment applications
Conduct CAT-72 conformance testing
Issue and manage ODDC attestations
Communicate about your application or attestation status
Maintain audit records as required for attestation integrity
Improve our services and platform
DATA RETENTION
We retain attestation records, including CAT-72 evidence and audit logs, for the duration of your attestation plus seven (7) years, as required for regulatory and evidentiary purposes.
Account information is retained while your account is active and for a reasonable period thereafter for legal and business purposes.
DATA SECURITY
All data is encrypted in transit (TLS 1.3) and at rest. We implement industry-standard security measures including access controls, audit logging, and regular security assessments.
YOUR RIGHTS
Depending on your jurisdiction, you may have rights to access, correct, delete, or port your personal data. Note that attestation records may be subject to retention requirements that limit deletion rights.
THIRD PARTIES
We do not sell your personal information. We may share data with service providers who assist in operating our platform, subject to confidentiality obligations.
UPDATES
We may update this policy periodically. Material changes will be communicated via email or platform notification.
PRIVACY QUESTIONS
Contact us about your data or privacy concerns.
CONFORMANCE@SENTINELAUTHORITY.ORG →