Data handling
What leaves a SENTRA box, where it goes, and what stays on the customer's systems.
SENTRA products run on the customer's own servers or appliances. Traffic is inspected there; it is not sent to SENTRA.
What a box sends to SENTRA#
| To | When | What | Can be switched off |
|---|---|---|---|
licensing.sentra-ai.com (licence check-in, ATS and NTS) |
~2 minutes after start, then every 6 hours | Product, Installation ID, host name, software version, the IDs of the licences it holds | Yes: SENTRA_LICENSING_CHECK=0 or "licensing_check": false |
updates.sentra-ai.com (stand-alone ATS and NTS, SENTRA VIEW) |
Every 30 minutes (VIEW: every 15 minutes when automatic, or on demand) | Downloads only: the signed release list and, when an update is installed, the package | Updates are installed only when an administrator decides (or chooses automatic) |
licensing.sentra-ai.com (VIEW or GUARD signing authority) |
Enrolment, and syncs | The authority's public key at enrolment; signed records of the licences it issued (licence keys, target system names, status) | An offline authority uses a signed ledger file instead |
No traffic content, request logs, visitor addresses, customer user accounts, passwords or configuration are sent to SENTRA by these mechanisms.
Inside a managed fleet#
Within a customer's or operator's own fleet, data flows only between their own systems:
- ATS / NTS box → its GUARD: health, statistics, licence state, security events for the GUARD's dashboards; the GUARD sends configuration, users allowed on that box, licences and updates.
- GUARD → its VIEW: a summary of customers, nodes, firewalls, billing records and alarms; VIEW sends changes and releases.
Optional outside services#
Some features contact outside services only when an administrator switches them on, for example public threat feeds or an AI provider for the AI analyst. The ATS console states this on every page: it only contacts outside services you switch on.
Data at rest#
- The Licensing Authority encrypts every record and every audit entry (see Trust model and keys).
- Secrets on boxes (keys, tokens, authority keys) are stored in files readable only by the service that needs them.