Subprocessors

Last Updated 23 July 2026

This schedule identifies the companies that may process Tenant Data on behalf of Saisify to provide the Services. It forms part of the Data Processing Terms in Section 20 of our Terms & Conditions. For transparency, it also separately identifies analytics providers that process usage data for Saisify's own websites and application; those providers are not Tenant Data subprocessors merely because they measure use of Saisify.

Not every subprocessor is used for every customer, Customer App, or request. A provider is used only where the relevant feature, model, routing, or infrastructure requires it. The location below identifies the provider's principal contracting or processing location; its services may use additional service locations, affiliates, and onward providers as described in the account, service, and data-processing terms applicable to Saisify's use of that provider.

This schedule does not list a social identity, payment, analytics, or advertising provider merely because it exchanges data with Saisify. Such a provider may instead process only data for which Saisify is the controller, or may act as an independent or joint controller. Those relationships are described in our Privacy Policy.

Infrastructure and operations

Amazon Web Services EMEA SARL
Location: Luxembourg; configured service regions and approved global support locations.
Purpose: cloud hosting, compute, databases, storage, backups, queues, transactional email infrastructure, security, and AI processing where enabled.
Data: Tenant Data stored or processed through Customer Apps; app content and files; account and member identifiers; message data; request, device, usage, security, and diagnostic data.
Cloudflare, Inc.
Location: United States and global network locations.
Purpose: network delivery, DNS, web security, edge processing, published-app routing, and object storage.
Data: app requests and responses; IP address and device or network data; app content, files, and Tenant Data routed, cached, protected, or stored through the relevant service.
Functional Software, Inc. d/b/a Sentry
Location: United States.
Purpose: error monitoring, performance diagnostics, and sampled session replay.
Data: account and device identifiers; request and error metadata; logs, stack traces, browser interactions, and content visible in a captured interface where applicable.

Communications

Google Cloud EMEA Limited (Google Workspace)
Location: Ireland; approved processing locations.
Purpose: business email and customer-support communications.
Data: names, email addresses, organization and account details, message content, attachments, support history, and technical or diagnostic information, including Tenant Data a customer chooses to provide in a support communication.
AC PM LLC (Postmark)
Location: United States.
Purpose: Customer App transactional email and delivery management.
Data: sender and recipient details; message content and identifiers; delivery, open, click, bounce, complaint, and suppression data; related device and diagnostic metadata.

AI processing

Anthropic, PBC
Location: United States.
Purpose: AI inference when a request is routed to this provider.
Data: prompts, instructions, conversation context, supported files or images, tool context, and generated Output needed to perform the request.
OpenAI OpCo, LLC
Location: United States.
Purpose: AI inference when a request is routed to this provider.
Data: prompts, instructions, conversation context, supported files or images, tool context, and generated Output needed to perform the request.
Google Cloud EMEA Limited
Location: Ireland; approved processing locations.
Purpose: AI inference when a request is routed to this provider.
Data: prompts, instructions, conversation context, supported files or images, tool context, and generated Output needed to perform the request.

Website and product analytics

The providers in this section process website or application usage data for Saisify as controller. We do not intend to send them Tenant Data, prompts, generated content, payment-card details, passwords, or the contents of private Customer Apps. They are listed here to keep the provider record complete, but they are not Tenant Data subprocessors for that use.

Google LLC and applicable Google contracting affiliates (Google Analytics and Google Tag Manager)
Location: United States and other locations where the provider's services operate.
Purpose: website and product measurement, tag management, campaign attribution, conversion reporting, and related diagnostics where enabled.
Data: cookie or similar identifiers; IP address and approximate location; browser, device, language, and operating-system data; referring and visited URLs; campaign data; page views, interactions, timestamps, and configured conversion events. Tag Manager delivers configured tags and does not determine the data each destination tag collects.
Microsoft Corporation and applicable Microsoft contracting affiliates (Microsoft Clarity)
Location: United States and other locations where the provider's services operate.
Purpose: product and website analytics, heatmaps, interaction diagnostics, and sampled session recordings where enabled.
Data: cookie or similar identifiers; IP address and approximate location; browser and device data; visited URLs; clicks, scrolling, pointer movement, navigation, page layout and DOM information, performance events, and masked or otherwise captured interface content depending on the configured privacy controls.

Changes and objections

We may add or replace subprocessors as our Services change. Where applicable law requires advance notice, we will notify affected customers through the Service or by email at least 15 days before the intended change takes effect. A customer may object during that notice period on reasonable data-protection grounds by contacting legal@saisify.com, as described in Section 20 of the Terms & Conditions.

Questions

For questions about a provider, the data it processes, or a relevant transfer safeguard, contact legal@saisify.com.