Sub-processors
Sub-processors
Source: SAIBASPACE/saiba-internal — compliance/sub-processors.md.
Versioned in repo. Copied here at deploy time, not fetched live.
TODO: this list is a working draft mirroring Saiba's current operational stack. The canonical, signed list will replace this content when the saiba-internal companion PR lands.
Active sub-processors
| Vendor | Purpose | Location | Transfers | Certification |
|---|---|---|---|---|
| Hetzner Online GmbH | Compute and primary hosting | Germany (EU) | EU only | ISO 27001 |
| Supabase Inc. | Application data storage and auth | EU region (Frankfurt) | EU region selected; controller can opt out of US sub-processors | SOC 2 Type II |
| Vercel Inc. | Static delivery and edge for marketing site | Global edge; primary EU | SCCs in place where applicable | SOC 2 Type II |
| Plausible Insights OÜ | Privacy-friendly analytics (no cookies, no cross-site tracking) | EU (Estonia / Germany) | EU only | GDPR-aligned |
| Formspree Inc. | Contact form submission relay | United States | SCCs | See vendor DPA |
| Google LLC (Google Calendar) | Meeting booking calendar integration | United States | SCCs | ISO 27001 / SOC 2 |
| Slack Technologies LLC | Internal coordination on inbound inquiries | United States | SCCs | ISO 27001 / SOC 2 |
Change notification
Material changes to this list (new sub-processors, changes in scope or location) are notified to active customers in advance of activation. To subscribe to change notifications, email gus@nearweek.com.