Sentro

Security and data protection

Your clients’ data, handled properly

An agency hands Sentro the most personal records it keeps: health declarations, beneficiaries, income and family. Here is exactly how they are held, who can see them, and what happens to them if you leave.

The Data Privacy Act

Roles written down, not implied

Under the Data Privacy Act of 2012 (RA 10173), your agency is the controller of its clients' personal data and Sentro processes it on your behalf. That is written into the terms.

Sensitive information, treated as such

Health-related details and beneficiaries are handled as sensitive personal information, and a form answer marked sensitive carries a lock wherever it is read.

Rights you can act on

Any individual's record can be exported, or erased where the law allows, on request. Every such request is logged.

A named officer

Questions about personal data go to our Data Protection Officer at dpo@mysentroapp.com.

Access

Everyone sees what their job needs

Every agency's records are kept apart from every other agency's, and inside an agency, what a person can see follows the structure you set up.

  • An adviser sees their own clients. A manager sees the people under them, and an administrator sees the agency.
  • Leads and prospects stay with the adviser who is working them, and an adviser's call notes and pinned notes are theirs alone.
  • A leader opening another adviser's client is recorded in the agency's own access log.
  • Every query is scoped to one agency, and that separation is checked by automated tests on every change.
  • Advisers and leaders sign in with their Google account; there is no shared login.

Our own access

Sentro support looks in only when you let it

The console we run the service from cannot open your agency's records. When you want help with something only visible from inside, your administrator allows it, and the permission runs out on its own.

Granted by your administrator

For an hour, a day, three days or a week, with the reason written down. It can be ended at once, and ending it ends any visit in progress.

Read-only, every time

A support visit can look and cannot change anything: every save is refused, twice over, by design.

On your record

Every grant and every visit appears on your own settings page, and a record opened during a visit is logged as viewed by support.

Resilience

Copied every night, rehearsed every week

Nightly, encrypted, off-site

Every night the database and every uploaded file are copied, encrypted, to storage kept away from the main servers.

A restore, rehearsed

Every week a restore from that copy is run for real and checked, so the day it is needed is not the first time.

One agency at a time

Each agency is also copied on its own every day, so a mistake in one agency can be put right without touching any other.

Encrypted in transit

Every page and every file travels over HTTPS, and a deleted file waits 30 days before it is erased for good.

Money and leaving

Paying for it, and leaving it

Payments, handled by the payment provider

Invoices are paid through a secure page run by our payment provider, by GCash, Maya, card or bank transfer. Sentro never sees or stores a card number.

If you leave, it leaves with you

On termination you have 30 days to export everything. After that we return it or delete it, your choice, and it is written into the terms rather than offered as a favour.
Privacy notice Terms of service Ask us a question

Ask us anything about your data

Bring your compliance questions to the demo. We would rather answer them before you sign than after.

Book a demoSee pricing