Built for European security teams. Auditable by design.
Everything a procurement officer, security reviewer, or DPO needs to evaluate SentriKat. No NDA required for public documents.
Last updated: 2026-10-09
Security
Architecture, application controls, and how data moves through the platform.
Security architecture
Transport encryption, password hashing, authentication, rate limiting, secrets at rest, agent key management.
Responsible disclosure
How to report a security issue, safe-harbor language, scope, and response-time targets.
System status
Real-time availability, 30-day uptime history, incidents, email and RSS subscriptions.
Compliance
Where we stand against the frameworks that matter for European security teams.
Compliance matrix
GDPR, FADP, NIS2, DORA, EU Cyber Resilience Act, ISO/IEC 27001, SOC 2, PCI-DSS, BOD 22-01.
Security & compliance roadmap
Planned security and compliance work: ISO 27001, SOC 2, pen test, disclosure program, DPIA support, SBOM pipeline.
NIS2 readiness
How SentriKat maps to NIS2 Article 21 controls and reads the European vulnerability database run by the EU cybersecurity agency under Article 12(2).
Data processing
Legal documents and vendor relationships that govern customer data.
Data Processing Agreement
Pre-signed DPA covering SaaS processing. Download, counter-sign, return.
Sub-processors
Every third party we share customer data with, their purpose, location, and transfer mechanism.
Privacy policy
Lawful basis, retention, rights, international transfers, controller information.
Supply chain
Build provenance and third-party component transparency.
Need something not listed here?
Email [email protected] with the document you need. We aim to reply within two business days and tell you whether it exists.