DRAFT — under legal review. This list is informational and provided for transparency. Material changes are announced with at least 30 days' notice as described below.
Saltare Machina Corporation (1449 S Michigan Ave, STE 13683, Chicago, IL 60605, United States) engages the following subprocessors to help deliver the Service. Each is bound by written data-protection obligations no less protective than our DPA.
| Subprocessor | Purpose | Data categories | Region |
|---|---|---|---|
| DigitalOcean | Application hosting (single-VPS Kamal deploy) + PostgreSQL + Spaces object storage | All workspace content | US |
| Cloudflare | Edge CDN, TLS termination, WAF | HTTP metadata; cached marketing HTML | Global |
| Subprocessor | Purpose | Data categories | Region |
|---|---|---|---|
| Anthropic | Claude LLM for agent responses | Agent-routed messages + selected workspace context | US |
| OpenAI | Text embeddings for hybrid search | Document bodies, message bodies, agent memories (vectorized) | US |
Both AI providers are engaged under zero-retention / no-training terms for Customer Content.
| Subprocessor | Purpose | Data categories | Region |
|---|---|---|---|
| Stripe | Subscription billing, credit top-ups, usage-based overage | Billing contact, Stripe customer ID, card fingerprint | US / EU |
| Subprocessor | Purpose | Data categories | Region |
|---|---|---|---|
| Honeybadger | Error monitoring | Backtraces, sanitised request metadata | US |
| LiveKit | Voice call transport (paid plans) | Call audio + metadata | US / EU |
Connectors that Customer workspaces enable (GitHub, Slack, Google, GitLab, Discord, Stripe, and others) act as subprocessors for data Customer chooses to send to or receive from them. Customer is responsible for reviewing and accepting each provider's terms when enabling a connector.
Saltare provides at least 30 days' prior notice of any material addition, replacement, or change of subprocessor via the workspace owners' email and the sub-processor change mailing list at [email protected].
Customers may object within the notice period for reasonable data-protection grounds, in which case we will work in good faith to resolve the objection and, failing that, Customer may terminate the affected service.