LEGAL
Subprocessors
This is the complete, current list of third-party services that process data on Sentiqra's behalf. It is not an "including but not limited to" list - if a service is not listed here, it does not process your data. One provider is identified by role rather than legal entity: the inference provider's identity is a protected commercial secret, disclosed to customers under NDA in the security package. The completeness claim covers every processing service - it does not assert that every legal entity is named publicly.
Processing locations at a glance
EU hosting is not EU-only processing. Application systems (portal, databases, queues) run on dedicated infrastructure in Germany. Two distinct flows leave or stay within the EU: submitted text is transmitted to a US inference subprocessor for transient analysis during the request only, while backups stay in the EU on AWS S3 (eu-central-1). Payments, optional OAuth sign-in, and support email involve their respective global providers as listed below.
| Legal entity | Service purpose | Region | Data categories | Retention | Transfer mechanism | Policy |
|---|---|---|---|---|---|---|
| Contabo GmbH | Dedicated infrastructure - application compute, database, and cache hosting | Germany (EU) | Account data, operational metadata, support correspondence, billing records - whatever the hosted systems store | Per our published retention schedule; hosting persists data for as long as the underlying record lives | None required - processing stays in the EU | Privacy |
| Third-party inference provider (disclosed under NDA) | Submitted-text analysis - transient computation during the request only | United States | Submitted text only - during the request; no account, billing, or payment data | Transient - processed for the duration of the request; not retained by Sentiqra for any other purpose | EU SCCs (2021/914); UK transfers covered by the UK Addendum or IDTA as applicable | Privacy |
| Amazon Web Services (S3) | Encrypted object storage for backups - disaster recovery only, not live processing | eu-central-1 (Germany, EU) | Encrypted backups of portal and API databases - may include account and billing records | Per backup schedule - hot 30 days, cold 90 days, then expired | EU storage region; EU SCCs cover any third-country support access | Privacy |
| Stripe | Payment processing - card payments, invoices, billing lifecycle | Global (US entity) | Billing data - payer name, email, payment method tokenization, transaction records | Per Stripe terms and statutory accounting retention | EU SCCs (2021/914); UK Addendum/IDTA as applicable | Privacy |
| PayPal | Payment processing - PayPal payments and billing lifecycle | Global (US entity) | Billing data - payer name, email, transaction records | Per PayPal terms and statutory accounting retention | EU SCCs (2021/914); UK Addendum/IDTA as applicable | Privacy |
| Sign-in with Google (optional OAuth) and delivery of contact-form/support email (Google Workspace) | Global (US entity) | Account identity (name, email, avatar) when you choose Google sign-in; contact-form submissions (name, email, message) | OAuth: authentication event only. Email: message retained in the support mailbox per support policy | EU SCCs (2021/914); UK Addendum/IDTA as applicable | Privacy | |
| GitHub | Sign in with GitHub (optional OAuth) | Global (US entity) | Account identity (name, email, avatar) when you choose GitHub sign-in | Authentication event only; the linked account record is held by Sentiqra for the account lifetime | EU SCCs (2021/914); UK Addendum/IDTA as applicable | Privacy |
Change notification
We provide at least 30 days' notice before adding or replacing a subprocessor, via email to the primary account contact. You may object to a new subprocessor on reasonable data-protection grounds within that window - see the Data Processing Agreement.
Scope of processing
Each provider's scope is limited to the data categories in its row. The inference provider receives submitted text transiently during the request only - not account data - and its identity and terms are disclosed under NDA in the security package. AWS S3 holds only encrypted backups (a different data class and region than live processing). Payment processors handle billing data only; OAuth providers see an authentication event only when you choose that sign-in method. No subprocessor receives submitted content for its own purposes. Customers with a security-review requirement can request the controlled architecture package under NDA.