Sentry’s DPA only refers to US and EU data protection laws, and we’re located in a different jurisdiction that has its own requirements for data processing agreements, or that provides its own standard contractual clauses for data transfers. Can we revise Sentry’s DPA or enter into standard contractual clauses from another country?

Currently, we will only negotiate agreements with, or consider additional terms from, customers with an Enterprise agreement.

This means that, for customers on Developer, Team, and Business plans, we will not incorporate changes or additional terms into our DPA. We will also not enter into standard contractual clauses that are not already incorporated into our DPA.

That said, Sentry follows the substantive obligations under our DPA for any customer who executes or accepts it, regardless of the customer's or its data subjects’ location.

When setting up a Sentry organization, we also provide for data storage location, where customers may select the US or EU. In some cases, selecting the EU for data storage may help address customer concerns. For cross-border transfers to the US from the EU, UK, and Switzerland, we are certified under and rely on the Data Privacy Framework, and all customer data transferred into Sentry's US infrastructure is handled in the same manner, regardless of place of origin. You can find more information at Schedule 3 of our DPA, or here.

Ultimately, Sentry customers on Developer, Team, and Business plans must determine for themselves whether the substantive obligations under our standard DPA and data storage location options are sufficient for their compliance needs.

(You can find information on available plans on our main Pricing Page, and if you're interested in speaking with our Sales Team about an Enterprise agreement, you can sign up for a demo at https://sentry.io/demo/.)