Subprocessors
Sayr uses the following third-party subprocessors to deliver our services. Each subprocessor has been selected with data protection in mind.
Last updated:
| Subprocessor | Purpose & Data Processed | Data Shared When | Location |
|---|---|---|---|
| Infrastructure | |||
| Zerops DPA / Privacy | Primary cloud hosting platform — application compute (backend, frontend, marketing, workers), managed PostgreSQL database, Redis All user data, application data, database contents | Always | EU (Czechia) |
| Hetzner Online GmbH DPA / Privacy | S3-compatible object storage and internal administrative tooling (Grafana, observability infrastructure) User-uploaded files, internal metrics and observability data | Always | EU (Germany, Finland) |
| Bunny CDN (BunnyWay d.o.o.) DPA / Privacy | Content delivery network for static assets and user-uploaded files Cached static assets, user-uploaded files, request metadata | Always | EU (Slovenia) |
| Cloudflare, Inc. DPA / Privacy | DNS registrar and DNS management Domain name records | Always | United States |
| Integrations | |||
| GitHub, Inc. (Microsoft) DPA / Privacy | OAuth authentication provider and GitHub App integration for linking repositories, syncing issues and pull requests, and posting comments User profile information, email address, authentication tokens, repository metadata, issue and pull request data, webhook payloads | Conditional Only if you sign in with GitHub or connect a GitHub repository | United States |
| Discord, Inc. DPA / Privacy | OAuth authentication provider User profile information, email address, authentication tokens | Conditional Only if you sign in with Discord | United States |
| Slack Technologies (Salesforce, Inc.) DPA / Privacy | OAuth authentication provider User profile information, email address, authentication tokens | Conditional Only if you sign in with Slack | United States |
| Doras (Doras Media Limited) | OAuth authentication provider User profile information, email address, authentication tokens | Conditional Only if you sign in with Doras | EU (Germany, Finland) |
| Payments | |||
| Polar Software Inc. DPA / Privacy | Payment processing (Merchant of Record) Billing information, payment details, email addresses | Conditional Only if you subscribe to a paid plan | EU (Sweden) |
| UseSend DPA / Privacy | Transactional email delivery Email addresses, email content | Always | United States |
| AI Processing | |||
| Mistral AI SAS DPA / Privacy | Large language model inference for AI-powered features (task summarization and related AI capabilities) Task titles, descriptions, comments, and timeline activity submitted to the AI summarization endpoint | Conditional Only when AI features are enabled and a user requests an AI task summary | EU (France) |
| Analytics & Observability | |||
| PostHog, Inc. (EU) DPA / Privacy | Product analytics Usage events, anonymized user behavior data | Always | EU (Germany) |
| Axiom, Inc. DPA / Privacy | Log management and observability Application logs, which may contain user identifiers and request metadata | Always | United States |
Changes to this list
We may update this list from time to time as our infrastructure evolves. If you have questions about our subprocessors, please contact us at support@sayr.io.