Subprocessors

Last Updated: June 25, 2026

Sunate uses service providers to host, secure, support, and deliver the Services.

A provider processes information only when the relevant feature is used or enabled. The exact provider, region, and information involved may vary by Customer configuration.

Review this list against Sunate's actual production configuration before publishing. Remove any provider that is not used and add any provider that is missing.

Core platform providers

Vercel

Purpose: Application hosting, content delivery, serverless processing, network security, and deployment.

Information: Requests, IP addresses, application content processed by hosted functions, logs, and technical metadata.

Supabase

Purpose: Database, authentication, tenant-scoped access controls, storage, and backend services.

Information: Account, workspace, CRM, consent, integration, and file information.

Twilio

Purpose: SMS, WhatsApp, phone verification, message delivery, status callbacks, and messaging compliance controls.

Information: Mobile numbers, message content, media, consent or opt-out metadata, delivery records, and technical identifiers.

Anthropic

Purpose: AI language-model processing for Copilot and related features.

Information: Prompts, relevant Customer Data, conversation context, tool results, and generated output needed for a request.

OpenAI

Purpose: AI language-model processing, fallback processing, transcription, image, and multimodal features where enabled.

Information: Prompts, relevant Customer Data, audio, images, documents, and generated output needed for a request.

Stripe

Purpose: Subscription billing, payment processing, invoicing, and fraud prevention.

Information: Customer and billing identifiers, transaction information, subscription status, and payment metadata. Full card details are generally collected directly by Stripe.

Resend

Purpose: Transactional and service email delivery.

Information: Recipient and sender addresses, message content, delivery metadata, and technical logs.

Google

Purpose: Authentication and, when enabled, Gmail, Calendar, Maps, and related APIs.

Information: Google account identifiers and the messages, events, location queries, tokens, or metadata required for user-requested features.

Optional infrastructure and feature providers

The following providers may be used only when the associated feature is enabled, configured, or selected:

• Amazon Web Services: Object storage or integration-related file handling.

• Sentry: Error monitoring, performance diagnostics, and technical-event investigation.

• Mapbox: Maps, geocoding, and location visualization.

• Trigger.dev: Background jobs and workflow execution.

• FAL: Supported image-generation or image-processing features.

• Sendblue: Supported iMessage delivery features.

• Firecrawl: Retrieval of permitted public web content for supported pricing or research workflows.

Customer-selected integrations

Customers may choose to connect services such as:

• DocuSign for electronic signatures.

• Intuit QuickBooks for accounting.

• CompanyCam for project photos and records.

• ABC Supply or other suppliers for product and pricing information.

• Other services shown in Sunate's integrations interface.

When a Customer authorizes an integration, Sunate exchanges information as needed to perform the requested feature. The integration provider's own terms and privacy notice also apply.

Messaging information

Mobile numbers and SMS opt-in information are disclosed only to providers necessary to operate and support the messaging service.

They are not provided to third parties or affiliates for their own marketing or promotional purposes.

Updates and objections

Sunate may add, replace, or remove providers as the Services evolve.

Material updates will be posted on this page and communicated through another reasonable mechanism where a contract or law requires notice.

A Customer with a contractual objection right should email legal@sunate.app promptly after notice and describe the reasonable data-protection grounds for the objection.