Subprocessors
Last updated: 8 August 2026
Last updated: 8 August 2026
A. Subprocessors for Customer Content
The following providers process Customer Personal Data on behalf of EbaSaiyo when the corresponding production feature is enabled.
| Provider | Purpose | Typical data | Notes |
|---|---|---|---|
| OpenAI | AI inference for drafts, classifications, decision support, and related AI features | Relevant email/thread content, instructions, prompts, generated outputs | Configured so API/business data is not used for OpenAI model training by default. |
| Supabase | Managed PostgreSQL/database infrastructure and related backend services | Workspace data, normalized email data, AI Employee configuration, audit/application records | Hosted database and related backend services for the Service. |
| Vercel | Application hosting, edge/serverless execution, delivery | Request metadata and application data processed by runtime as necessary | Hosts and delivers the EbaSaiyo application. |
| Clerk | Authentication, identity, and session management | User identity, email, organization/membership and authentication metadata | Provides sign-in, sessions, and organization membership. |
B. Customer-Selected Connected Platforms
These providers operate the Customer's underlying email service. EbaSaiyo exchanges data with them at the Customer's direction using authorized OAuth/API access.
| Provider | Purpose | Relationship |
|---|---|---|
| Google LLC / Google Workspace / Gmail | Source/destination for Customer email | Customer-selected third-party platform; EbaSaiyo accesses data under Customer/user authorization and applicable Google API policies. |
| Microsoft Corporation / Microsoft 365 / Outlook / Microsoft Graph | Source/destination for Customer email | Customer-selected third-party platform; EbaSaiyo accesses data under Customer/user authorization and granted Microsoft Graph permissions. |
Depending on the legal context, these platforms may act as independent controllers or processors under their own agreements with the Customer. They should not automatically be characterized as EbaSaiyo subprocessors for all processing.
C. Billing Provider
| Provider | Purpose | Relationship |
|---|---|---|
| Stripe | Subscription billing, payments, fraud prevention, tax/payment administration, and customer invoices | Stripe may act as processor and/or independent controller depending on the processing activity and applicable Stripe terms. |
D. Monitoring / Analytics Providers
EbaSaiyo does not currently appoint Sentry, PostHog, or another analytics/monitoring vendor as an active subprocessor for Customer Content. If such a vendor is enabled later, this page will be updated and, where required by the Data Processing Addendum, notice will be provided.
E. Subprocessor Change Notice
Where required by the Data Processing Addendum, EbaSaiyo will provide reasonable notice before appointing a new subprocessor that will process Customer Personal Data and will permit objections based on reasonable data-protection grounds.
Contact contact@ebasaiyo.com for subprocessor questions.