Subprocessors
Sayr uses the following third-party subprocessors to deliver our services. Each subprocessor has been selected with data protection in mind.
Last updated:
| Subprocessor | Type | Purpose | Data Processed | Location |
|---|---|---|---|---|
| Infrastructure | ||||
| Zerops DPA / Privacy | Infrastructure | Primary cloud hosting platform — application compute (backend, frontend, marketing, workers), managed PostgreSQL database, Redis | All user data, application data, database contents | EU (Czechia) |
| Hetzner Online GmbH DPA / Privacy | Infrastructure | S3-compatible object storage and internal administrative tooling (Grafana, observability infrastructure) | User-uploaded files, internal metrics and observability data | EU (Germany, Finland) |
| Bunny CDN (BunnyWay d.o.o.) DPA / Privacy | Infrastructure | Content delivery network for static assets and user-uploaded files | Cached static assets, user-uploaded files, request metadata | EU (Slovenia) |
| Cloudflare, Inc. DPA / Privacy | Infrastructure | DNS management, DDoS protection, traffic proxying | Network request metadata, IP addresses | United States |
| Integrations | ||||
| GitHub, Inc. (Microsoft) DPA / Privacy | Integrations | OAuth authentication provider and GitHub App integration for linking repositories, syncing issues and pull requests, and posting comments | User profile information, email address, authentication tokens, repository metadata, issue and pull request data, webhook payloads | United States |
| Discord, Inc. DPA / Privacy | Integrations | OAuth authentication provider | User profile information, email address, authentication tokens | United States |
| Slack Technologies (Salesforce, Inc.) DPA / Privacy | Integrations | OAuth authentication provider | User profile information, email address, authentication tokens | United States |
| Doras (Doras Media Limited) | Integrations | OAuth authentication provider | User profile information, email address, authentication tokens | EU (Germany, Finland) |
| Payments | ||||
| Polar Software Inc. DPA / Privacy | Payments | Payment processing (Merchant of Record) | Billing information, payment details, email addresses | EU (Sweden) |
| UseSend DPA / Privacy | Transactional email delivery | Email addresses, email content | United States | |
| Analytics & Observability | ||||
| PostHog, Inc. (EU) DPA / Privacy | Analytics & Observability | Product analytics | Usage events, anonymized user behavior data | EU (Germany) |
| Axiom, Inc. DPA / Privacy | Analytics & Observability | Log management and observability | Application logs, which may contain user identifiers and request metadata | United States |
| ClickHouse, Inc. DPA / Privacy | Analytics & Observability | Analytics event store — captures platform events and aggregate metrics for internal reporting | User IDs, organisation IDs, event types and timestamps, aggregate platform metrics | EU (Czechia) |
Changes to this list
We may update this list from time to time as our infrastructure evolves. If you have questions about our subprocessors, please contact us at support@sayr.io.