Sub-processors
Provided by Sepenta Eğitim Danışmanlık Yazılım Turizm Ticaret Limited Şirketi. Last updated: 26 October 2026.
Draft. Highlighted items still need a value or a check before this page is published.
| Provider | Product | What it does | Data involved | Location | Safeguards |
|---|---|---|---|---|---|
| Google Cloud (Google Cloud EMEA Limited) | Both | Hosts the services: application, database, file storage, task queue, secret store | All customer content and account data | EU: Belgium (europe-west1). [CONFIRM: Magnesia Firestore database location and Penta Cloud SQL region] | Google Cloud data processing terms; encryption at rest |
| Google Cloud Speech-to-Text | Magnesia | Transcribes standup recordings (Chirp 3, automatic language detection, speaker labels) | Audio of recordings | EU multi-region | Same Google Cloud terms, in Sepenta's own project |
| OpenAI (OpenAI, L.L.C. / OpenAI Ireland Limited [CONFIRM: contracting entity]) | Penta | Transcribes audio, describes images, analyses content and drafts epics and stories, through its API | Assessment content when an assessment or transcription is run | May be processed in the United States | OpenAI API data processing addendum and standard contractual clauses. Not used for training. Requests kept up to 30 days for abuse monitoring; responses are not stored (see AI and your data) |
| Anthropic (Anthropic, PBC [CONFIRM: contracting entity]) | Magnesia | Analyses a standup transcript, and drafts report narrative from program data | A transcript, with Jira work in flight (key, title, status, priority, assignee name), open actions and decisions, only when an Admin or Delivery Manager requests analysis; program numbers without names for the narrative | May be processed in the United States | Anthropic commercial terms and data processing addendum with standard contractual clauses. Not used for training by default. Inputs and outputs deleted within 30 days |
| Resend (Resend, Inc.) | Both | Sends invitation and sign-in code emails | Recipient address, inviter, workspace name, the email text | EU region [CONFIRM: Resend EU sending region and data location] | Resend data processing addendum and standard contractual clauses |
Services you connect yourself
When a customer connects its own accounts, the provider acts for the customer and under the customer's own agreement with it: Atlassian (Jira, through the person's own Atlassian sign-in; Penta creates issues under that person's name, Magnesia reads), and GitHub (read-only, through the customer's GitHub App installation).
Sign-in providers
Google and Microsoft confirm who you are when you choose to sign in with them. They are independent controllers of your account with them. We receive only your verified email address and name.
Our own tools
[OTHER TOOLS: any email, support desk, analytics or accounting tool that handles customer personal data]
Questions: info@sepenta.io. Sepenta Eğitim Danışmanlık Yazılım Turizm Ticaret Limited Şirketi, tax ID 7611208267, Kuşadası, Aydın, Türkiye.