Subprocessors
Last updated: September 2026
Our service providers
SA Note uses the trusted providers below to operate the platform, each bound by a contract requiring appropriate security and data-protection measures. We do not sell personal data. This list may change; we will update this page accordingly.
| Provider | Purpose | Data involved | Location |
|---|---|---|---|
| Stripe | Payment processing & subscription billing | Name, email, billing details, payment tokens | USA / EU |
| Amazon Web Services | Website and app hosting & CDN (S3, CloudFront), database, file storage, email (SES) | All stored categories, IP address, request logs | USA / EU / global |
| Bunny.net | Media storage & content delivery (CDN) | Uploaded media, IP address | EU / global |
| Anthropic (Claude) | AI exam debriefs & chat moderation | Exam scores, reflections, chat messages | USA |
| Brevo | Transactional & marketing email | Name, email | EU |
| Google Analytics (GA4) | Website and app analytics (consent-based) | Usage events, device data, IP address | USA / global |
| Mixpanel | Product analytics in the app (consent-based) | Usage events, device data | USA / EU |
| Google (OAuth) | Sign in with Google | Google ID, email, name | USA / global |
| Google Fonts | Web font delivery | IP address, browser details | USA / global |
| Meilisearch | Search indexing | Content metadata | Hosting-dependent |
| Upstash | Caching / session data | Session & temporary data | Global |
International transfers
Several providers operate outside the EEA/UK. Where we transfer personal data from those regions we rely on appropriate safeguards such as Standard Contractual Clauses, as described in our Privacy Policy. To ask about a specific provider, contact hello@sanote.app.