sentivaro
Resilience assessmentEmployee training
Why Sentivaro
Phishing without secretsMake good decisionsRead between the linesVerify through another channelProtect the processWhen everything looks rightThe final decisionConnect the eventsKeep exceptions under controlVerify the evidenceContain the impact
ContactHelp CentreNews
Sign in
Product
Resilience assessmentEmployee training
Why Sentivaro
Knowledge
Phishing without secretsMake good decisionsRead between the linesVerify through another channelProtect the processWhen everything looks rightThe final decisionConnect the eventsKeep exceptions under controlVerify the evidenceContain the impact
ContactSign in

Sentivaro · Legal documents

Subprocessors

Version 1.1

Sentivaro service providers and subprocessors

Version: 1.1

Last updated: 16 September 2026

Sentivaro processes Campaign and Training Participant Data on behalf of the Organisation using the platform. The Organisation remains the controller of that data, while Dawid Balcer, who operates the Sentivaro project, acts as processor under the DPA. The current subprocessor is listed below.

1. Subprocessor

ProviderScope of servicesCategories of dataProcessing locationTransfer outside the EEA
Celerise sp. z o.o., trading as Hosti24, al. Jana Pawła II 27, 00-867 Warsaw, Poland; KRS 0000574960, NIP 5252628870, REGON 362472709Shared hosting for the application and files, MySQL databases, email and SMTP services, DNS infrastructure and backups used to protect the Service against data lossAccount and Organisation data, Employee and Participant Data, Campaign and Training Data, email addresses, controlled-message content, delivery status, IP addresses, logs and technical dataPoland — server infrastructure located in the ATM data centre in Poland, according to the providerNot applicable to the provider's declared primary infrastructure in Poland. Any change affecting international transfers will be reflected in this list.

Celerise sp. z o.o. provides a data processing agreement covering data stored as part of its services. Provider backups protect data against loss and do not replace independent backups maintained by Sentivaro.

2. Email services selected by the Organisation

An Organisation may configure its own email account in Sentivaro, such as Gmail, Microsoft 365 or another provider's service. The Organisation selects and controls that provider, and Sentivaro uses it solely on the Organisation's instructions to send the specified messages.

Such providers do not automatically become Sentivaro subprocessors. The Organisation is responsible for assessing their terms of use, legal basis, processing locations and any transfers outside the EEA.

3. Changes to this list

Sentivaro will notify Organisations of a planned addition or replacement of a subprocessor at least 14 days in advance, unless an earlier change is required to protect security or service continuity. In an urgent case, notice will be provided without undue delay.

An Organisation may raise a reasoned objection in accordance with the DPA. Sentivaro retains archived versions of this list together with their effective dates.

Questions about providers and data processing may be sent to contact@sentivaro.com.

© 2026 SentivaroTermsPrivacy PolicyDPAAcceptable useSubprocessors
YouTubeXTikTokLinkedInInstagramFacebook