Sub-processors
Sorraia, operated by Sado Labs, Inc., uses the following third-party sub-processors to deliver the service. Each processes data only as needed for its function.
| Name | Purpose | Data processed | Location |
|---|---|---|---|
| Render | Application hosting, compute & managed PostgreSQL (primary datastore) | All service data — in transit, and customer content at rest (encrypted) | United States |
| Clerk | Authentication & user management | Account identity data (name, email); calendar OAuth tokens | United States |
| Stripe | Payment processing (platform billing + merchant Connect payouts) | Billing details, payment tokens (card data never touches Sorraia) | United States |
| Resend | Transactional email delivery | Recipient addresses, email content | United States |
| Cloudflare | CDN, DNS & object storage (R2) | Cached static content; product & brand images at rest (R2 object storage) | Global (edge network) |
| Sentry | Error monitoring | Technical error metadata (no form-submission content) | United States |
| Nango | OAuth token management for customer-connected integrations (Slack, Mailchimp, HubSpot) | OAuth tokens for integrations the customer chooses to connect | United States |
| Anthropic | AI page-analysis (form-mimic import) | Customer-initiated page-import content only (never Slack data, form submissions, or health information) | United States |
Last updated: August 11, 2026. We update this page when our sub-processors change; additional processors are added here as integrations activate (for example, Zoom and Microsoft for video and calendar, currently pending). Questions: [email protected].