Legal · Subprocessors
Subprocessors
Draft · Not yet effective
For review by counsel before publication.
Effective date: [Effective date]
Sonata relies on a small number of trusted providers to operate the Service. This page lists the subprocessors that may process data in connection with Sonata, and we update it as the list changes.
| Subprocessor | Purpose | Data processed |
|---|---|---|
| Vercel | Application hosting and delivery; page-view and performance telemetry. | Application requests; basic usage and performance telemetry, no workspace content. |
| Supabase | Database, authentication, and file storage. | All stored workspace and account data. |
| Anthropic | AI model inference. | Content submitted to AI models at a user’s direction. |
| Google Workspace connections, only when a Customer connects Google services. | Data exchanged with the Customer’s connected Google Drive, Gmail, or Calendar, as directed. |
Note on customer-provided AI
Where a Customer brings its own AI model provider credentials, that provider processes the Customer’s content under the Customer’s own account and agreement, and is not a Sonata subprocessor.
Changes
Sonata will maintain this list and, under the Data Processing Agreement, provide a means for customers to be informed of changes.