Subprocessors
Sayr uses the following third-party subprocessors to deliver our services. Each subprocessor has been selected with data protection in mind.
Last updated:
| Subprocessor | Purpose & Data Processed | Data Shared When | Location |
|---|---|---|---|
| Infrastructure | |||
| ZeropsDPA / Privacy | Primary cloud hosting platform — application compute (backend, frontend, marketing, workers), managed PostgreSQL database, RedisAll user data, application data, database contents | Always | EU (Czechia) |
| Hetzner Online GmbHDPA / Privacy | S3-compatible object storage and internal administrative tooling (Grafana, observability infrastructure)User-uploaded files, internal metrics and observability data | Always | EU (Germany, Finland) |
| Bunny CDN (BunnyWay d.o.o.)DPA / Privacy | Content delivery network for static assets and user-uploaded filesCached static assets, user-uploaded files, request metadata | Always | EU (Slovenia) |
| Cloudflare, Inc.DPA / Privacy | DNS registrar and DNS managementDomain name records | Always | United States |
| Integrations | |||
| GitHub, Inc. (Microsoft)DPA / Privacy | OAuth authentication provider and GitHub App integration for linking repositories, syncing issues and pull requests, and posting commentsUser profile information, email address, authentication tokens, repository metadata, issue and pull request data, webhook payloads | ConditionalOnly if you sign in with GitHub or connect a GitHub repository | United States |
| Discord, Inc.DPA / Privacy | OAuth authentication providerUser profile information, email address, authentication tokens | ConditionalOnly if you sign in with Discord | United States |
| Slack Technologies (Salesforce, Inc.)DPA / Privacy | OAuth authentication providerUser profile information, email address, authentication tokens | ConditionalOnly if you sign in with Slack | United States |
| Doras (Doras Media Limited) | OAuth authentication providerUser profile information, email address, authentication tokens | ConditionalOnly if you sign in with Doras | EU (Germany, Finland) |
| Payments | |||
| Polar Software Inc.DPA / Privacy | Payment processing (Merchant of Record)Billing information, payment details, email addresses | ConditionalOnly if you subscribe to a paid plan | EU (Sweden) |
| UseSendDPA / Privacy | Transactional email deliveryEmail addresses, email content | Always | United States |
| AI Processing | |||
| RequestyDPA / Privacy | LLM gateway that routes AI-powered feature requests (task summarization, recommendations, release notes) to our model provider over Requesty's EU-only endpointTask titles, descriptions, comments, and timeline activity submitted to AI features, plus request metadata (user, organization, and task identifiers) for tracing | ConditionalOnly when AI features are enabled and a user requests an AI task summary, recommendation, or release note | EU (Germany) |
| MistralDPA / Privacy | Large language model inference for AI-powered features (task summarization and related AI capabilities), accessed via our Requesty gatewayTask titles, descriptions, comments, and timeline activity submitted to the AI summarization endpoint | ConditionalOnly when AI features are enabled and a user requests an AI task summary | EU (France) |
| Analytics & Observability | |||
| PostHog, Inc. (EU)DPA / Privacy | Product analyticsUsage events, anonymized user behavior data | Always | EU (Germany) |
| Axiom, Inc.DPA / Privacy | Log management and observabilityApplication logs, which may contain user identifiers and request metadata | Always | United States |
Changes to this list
We may update this list from time to time as our infrastructure evolves. If you have questions about our subprocessors, please contact us at support@sayr.io.