Security

Last updated: 28 October 2026

SentAna handles your customers' messages, so we built it to keep that data in the EU, separated from every other company, and visible only to the people you choose.

1. Where your data lives

• All data is stored on servers in the EU — Hetzner, Helsinki (Finland).
• Every connection uses HTTPS (TLS), with HSTS on the whole site.

2. Your data is separated from other companies

• Every record belongs to one organisation, and every query is filtered by it.
• Users of one organisation can never see another organisation's data.

3. Who can see what

• Roles — admin, manager, analyst, support admin, live-chat agent and more. Each role sees only what it needs.
• Two-factor authentication (2FA) — with an authenticator app and recovery codes. Your admin can require it for every user.
• Passwords are stored hashed, never in plain text. Credentials for your own systems are stored encrypted.
• SentAna staff access is limited to named people.

4. Logged and deleted on time

• Audit log — every data export, admin action and deletion is logged: who, when and what.
• Exports containing personal data are deleted automatically after 30 days.
• You decide how long tickets are kept (from 12 months up to 7 years), and we delete data on request.

5. AI with a human in control

• You choose per type of request: always manual, approval required, or fully automatic when the AI is confident.
• Emails about complaints, payments and contract cancellations always reach a person.
• The AI provider (Anthropic) does not use your content to train its models.

6. Sub-processors and DPA

We sign a Data Processing Agreement (DPA) with every customer. It lists our sub-processors — Hetzner, Anthropic, Sinch, Google, Resend, Stripe and (if you connect it) HubSpot — and the security measures above. See also our Privacy Policy.

7. Questions or a security issue?

Contact support@sentana.se. For a pilot we can go through your security questionnaire together.