Privacy Policy & Telemetry Governance

1. Principles of Data Sovereignty (UU PDP No. 27/2022)

PT CTARTech Digital Nusantara ('CTARTech', 'we', or 'SentinelOps') commits to zero unlawful cross-border telemetry transfer under Article 56 of Law No. 27/2022 on Personal Data Protection. All enterprise logs, customer identifiers, incident metrics, and operational traces are housed exclusively within Indonesian sovereign data centers (AWS ap-southeast-3 Jakarta or GCP asia-southeast2 Jakarta).

2. Multi-Tenant Data Isolation Guarantee

SentinelOps utilizes strict Row-Level Security (RLS) and cryptographically enforced tenant headers. Data originating from one tenant (e.g. Bank Mandiri) is strictly partitioned and mathematically segregated from all other tenants (e.g. Fintech Maju Bersama or PLN). No tenant user, API token, or webhook dispatcher can view, query, or leak telemetry across organizational boundaries.

3. Air-Gapped & Offline Deployment Exemption

For sovereign banking, military, and state-owned critical infrastructure utilizing the Air-Gapped Edition: SentinelOps operates with 100% Zero-Call-Home architecture. No telemetry, heartbeats, logs, or analytics are ever transmitted back to CTARTech cloud servers. Offline license validation is cryptographically achieved via Ed25519 public key verification within the client's isolated enclave.

4. Immutable Cryptographic Audit Logs

All critical actions (ticket creations, SLA escalations, supervisor sign-offs, and parameter changes) are hashed using SHA-256 and chained into an immutable audit ledger. Any attempt to tamper with history or delete records breaks the blockchain seal and alerts the designated tenant supervisor immediately.

5. Data Retention & Erasure Rights

Tenants maintain full ownership over their corporate telemetry. Upon subscription termination or official request by an authorized Data Protection Officer (DPO), all tenant data will be permanently wiped with cryptographic zeroization within 30 calendar days, accompanied by an official destruction certificate.

6. Security Inquiries & DPO Contact

If you have questions regarding telemetry compliance or need a customized Data Processing Agreement (DPA) / B2B Non-Disclosure Agreement (NDA), contact our security office: