Sub-processors
Last updated: 5 July 2026
We use the following processors to operate Sapyora. Each processes personal data on our behalf under a data processing agreement. Transfers outside the EU/EEA rely on appropriate safeguards (EU-US Data Privacy Framework and/or Standard Contractual Clauses).
Supabase
Purpose: database & authentication.
Region: EU (Frankfurt).
Transfer outside EU/EEA: no.
Google (Gemini API)
Purpose: AI processing of transcripts and article content.
Region: United States.
Transfer outside EU/EEA: yes — SCC / Data Privacy Framework.
Lemon Squeezy
Purpose: payments, as Merchant of Record.
Region: United States.
Transfer outside EU/EEA: yes — SCC / Data Privacy Framework.
Vercel
Purpose: web hosting and content delivery.
Region: global edge network.
Transfer outside EU/EEA: possible — SCC / Data Privacy Framework.
Fly.io
Purpose: processing workers.
Region: EU (Amsterdam).
Transfer outside EU/EEA: no.
Sentry
Purpose: error monitoring.
Region: EU (Germany).
Transfer outside EU/EEA: no.
PostHog
Purpose: product analytics (only with your consent).
Region: EU.
Transfer outside EU/EEA: no.
Resend
Purpose: transactional email.
Region: United States.
Transfer outside EU/EEA: yes — SCC / Data Privacy Framework.
Cloudflare
Purpose: DNS and network protection.
Region: global.
Transfer outside EU/EEA: possible — SCC / Data Privacy Framework.
Webshare
Purpose: proxy network used to fetch public YouTube data.
No account personal data is sent — request routing only.