Sub-processors
Last updated Oct 14, 2026
Companies that process personal data on our behalf to run Sukar. Google and Microsoft are not listed: they are your own providers, and you connect them yourself.
| Company | Purpose | Data involved | Location | Status |
|---|---|---|---|---|
| Amazon Web Services | Hosting, database and backups | All customer data stored by Sukar | European Union (Frankfurt, Germany) | In use |
| AI model provider | AI model that understands requests and writes replies | Message content, the photos and documents you send, and the context needed for a task | United States | In use |
| Composio | Connections to the apps you link and the actions taken in them | App access tokens and the app data needed for a task | United States | In use |
| Meta Platforms (WhatsApp) | Sign-in codes and chat with your assistant | Phone number and message content | Global | In use |
| Telegram | Chat with your assistant, if you choose it | Telegram ID and message content | Global | In use |
| Sendblue | iMessage chat with your assistant, if you choose it | Phone number or Apple ID, and message content | United States | In use |
| Twilio | Sign-in codes by SMS, and phone calls with your assistant | Phone number, the code message and call audio | United States | In use |
| Resend | Transactional email: sign-in codes and account notices, and email your assistant sends and receives at its own address | Email address and email content | European Union (Ireland) | In use |
| Deepgram | Speech-to-text for voice notes and the Action Button (also used as a backup transcription service) | Audio recordings and transcripts | United States | In use |
| ElevenLabs | Speech-to-text for voice notes | Voice notes you send, used only to turn them into text | United States | In use |
| Cloudflare | Bot check (Turnstile) on sign-up and public forms; DNS; forwarding mail sent to support | IP address and browser signals; emails you send to support | Global | In use |
| Better Stack | Application logs and uptime monitoring | Technical logs, personal details removed where possible | European Union | In use |
| Sentry | Error tracking, so we can find and fix what breaks | Error reports with personal details removed, an opaque account ID only, masked recordings of app sessions (layout and clicks, no text you see or type), and page and request timings | European Union (Germany) | In use |
| PostHog | Product analytics: which features are used and where people get stuck | Usage events with an opaque account ID only: no message content and no IP address | European Union | In use |
| Stripe | Card payments, subscriptions and invoices | Name, email and card details (only Stripe sees your full card number) | United States / European Union | In use |
Amazon Web Services
- Purpose
- Hosting, database and backups
- Data involved
- All customer data stored by Sukar
- Location
- European Union (Frankfurt, Germany)
- Status
- In use
AI model provider
- Purpose
- AI model that understands requests and writes replies
- Data involved
- Message content, the photos and documents you send, and the context needed for a task
- Location
- United States
- Status
- In use
Composio
- Purpose
- Connections to the apps you link and the actions taken in them
- Data involved
- App access tokens and the app data needed for a task
- Location
- United States
- Status
- In use
Meta Platforms (WhatsApp)
- Purpose
- Sign-in codes and chat with your assistant
- Data involved
- Phone number and message content
- Location
- Global
- Status
- In use
Telegram
- Purpose
- Chat with your assistant, if you choose it
- Data involved
- Telegram ID and message content
- Location
- Global
- Status
- In use
Sendblue
- Purpose
- iMessage chat with your assistant, if you choose it
- Data involved
- Phone number or Apple ID, and message content
- Location
- United States
- Status
- In use
Twilio
- Purpose
- Sign-in codes by SMS, and phone calls with your assistant
- Data involved
- Phone number, the code message and call audio
- Location
- United States
- Status
- In use
Resend
- Purpose
- Transactional email: sign-in codes and account notices, and email your assistant sends and receives at its own address
- Data involved
- Email address and email content
- Location
- European Union (Ireland)
- Status
- In use
Deepgram
- Purpose
- Speech-to-text for voice notes and the Action Button (also used as a backup transcription service)
- Data involved
- Audio recordings and transcripts
- Location
- United States
- Status
- In use
ElevenLabs
- Purpose
- Speech-to-text for voice notes
- Data involved
- Voice notes you send, used only to turn them into text
- Location
- United States
- Status
- In use
Cloudflare
- Purpose
- Bot check (Turnstile) on sign-up and public forms; DNS; forwarding mail sent to support
- Data involved
- IP address and browser signals; emails you send to support
- Location
- Global
- Status
- In use
Better Stack
- Purpose
- Application logs and uptime monitoring
- Data involved
- Technical logs, personal details removed where possible
- Location
- European Union
- Status
- In use
Sentry
- Purpose
- Error tracking, so we can find and fix what breaks
- Data involved
- Error reports with personal details removed, an opaque account ID only, masked recordings of app sessions (layout and clicks, no text you see or type), and page and request timings
- Location
- European Union (Germany)
- Status
- In use
PostHog
- Purpose
- Product analytics: which features are used and where people get stuck
- Data involved
- Usage events with an opaque account ID only: no message content and no IP address
- Location
- European Union
- Status
- In use
Stripe
- Purpose
- Card payments, subscriptions and invoices
- Data involved
- Name, email and card details (only Stripe sees your full card number)
- Location
- United States / European Union
- Status
- In use
When we add a provider, we list it on this page before it starts processing customer data.