Subprocessors
Last updated: June 2026
Our service providers
SA Note uses the trusted providers below to operate the platform, each bound by a contract requiring appropriate security and data-protection measures. We do not sell personal data. This list may change; we will update this page accordingly.
| Provider | Purpose | Data involved | Location |
|---|---|---|---|
| Stripe | Payment processing & subscription billing | Name, email, billing details, payment tokens | USA / EU |
| Amazon Web Services | Hosting, database, file storage, email (SES) | All stored categories | USA / EU |
| Bunny.net | Media storage & content delivery (CDN) | Uploaded media, IP address | EU / global |
| Anthropic (Claude) | AI exam debriefs & chat moderation | Exam scores, reflections, chat messages | USA |
| Brevo | Transactional & marketing email | Name, email | EU |
| Mixpanel | Product analytics (consent-based) | Usage events, device data | USA / EU |
| Google (OAuth) | Sign in with Google | Google ID, email, name | USA / global |
| Meilisearch | Search indexing | Content metadata | Hosting-dependent |
| Upstash | Caching / session data | Session & temporary data | Global |
| Vercel | Frontend hosting / CDN | IP address, request logs | USA / global |
International transfers
Several providers operate outside the EEA/UK. Where we transfer personal data from those regions we rely on appropriate safeguards such as Standard Contractual Clauses, as described in our Privacy Policy. To ask about a specific provider, contact contact@sa-note.com.