Privacy Policy

Information we collect

• Account & identity. When you sign in, we receive your name, email address, and an account identifier from your identity provider. We do not collect or store passwords (sign-in is via single sign-on).
• Organization data. Organizations you create or join, team memberships, and invitation email addresses.
• Assessment preparation data. The information you enter to prepare an assessment — per-requirement findings and objective answers, computed scores and statuses, POA&M notes, CAGE codes and scope details, and Level 3 / Rev 3 readiness answers. This is your own preparation material, not the federal CUI you are protecting.
• Evidence files. Documents you optionally upload as supporting evidence. Every upload requires you to attest the file contains no CUI. Do not upload CUI.
• Usage & technical data. Standard server logs (e.g., IP address, request metadata) used to operate and secure the service.

How we use it

To provide and maintain the service, authenticate you, scope data to your organization, send service and reaffirmation-reminder emails, secure the platform, and comply with legal obligations. We do not sell your personal information, and we do not use your assessment data to advertise to you.

No CUI by design

SentryNexus is a non-CUI preparation tool. The platform is not built or authorized to store CUI, and you must not upload CUI. The per-upload no-CUI attestation is a standing control, not a temporary gate.

Service providers

We rely on a small number of vetted processors to run the service: a cloud infrastructure provider (authentication, hosting, logging, and storage), an email delivery provider (transactional and reminder email), a payment processor (subscription billing for paid plans — we never see or store your card number), a web-analytics provider (aggregate site-usage measurement, set only with your consent), and a bot-protection provider (used only on the provider sign-up form to screen automated abuse). These providers process data on our behalf under their own terms and security commitments. See our Security page for more.

Cookies & sessions

We use a session cookie to keep you signed in. With your consent, we also set analytics cookies to measure aggregate site usage — you can decline in the cookie banner, and analytics stay off until you accept. We do not use third-party advertising cookies, and no assessment data or CUI is shared with the analytics provider.

Data retention & your choices

We retain your account and assessment data while your account is active. You may request access to, correction of, or deletion of your data, or deletion of your account, by contacting us at the address below. Deleting an assessment or organization removes its associated preparation data.

Children

SentryNexus is a business tool intended for use by organizations and is not directed to children under 18.

Changes

We may update this policy from time to time; we will revise the “last updated” date above and, where appropriate, provide additional notice.

Contact

Questions or requests: privacy@sentrynexus.io. SentryNexus is operated by SentryNexus LLC, a Wyoming limited liability company.