Security & data
How okokumo hosts and protects your data — see also the full legal notices and privacy policy.
Data location
Hosted on Scaleway infrastructure located in France (fr-par region). A second, EU-based probe region exists for monitoring redundancy only — it never stores your personal data, only transient check-execution results in transit.
Sub-processors
| Sub-processor | Purpose | Location |
|---|---|---|
| Scaleway SAS | Hosting: compute, storage, managed database, DNS, transactional email for alerts | France |
| Stripe | Payment processing and billing | EU (Stripe Payments Europe Ltd, Ireland, for EU customers) |
Technical measures
- TLS on all customer-facing endpoints, Let's Encrypt-issued, auto-renewed.
- Passwords stored as salted bcrypt hashes — never in plaintext.
- Session-based authentication with secure, httponly cookies.
- Multi-tenant isolation enforced at the application layer — every record is scoped to an organization, every query is organization-scoped.
- Webhook alert payloads are HMAC-signed so recipients can verify authenticity.
- Infrastructure provisioned via version-controlled Terraform; deploys via CI/CD with a full audit trail.
Retention
Account and organization data is kept for the lifetime of your account. On account deletion, personal data is deleted or anonymized within a reasonable delay, except where French or EU law requires longer retention (e.g. billing records).
Data Processing Agreement
Read the full DPA (Art. 28 GDPR structure) online, or use your browser's print-to-PDF to save a copy: View DPA.
Live status
Curious whether Sentinel itself is up right now? Live system status.