Sub-processors

Saturation.io Subprocessor List

Last Updated: Nov 2, 2026

Introduction

This document lists all third-party subprocessors engaged by Saturation.io, Inc. ("Saturation.io") to process personal data on behalf of our customers and users. In accordance with our Privacy Policy and applicable data protection laws (including GDPR and CCPA), we maintain this list to provide transparency about our data processing practices.

We conduct appropriate due diligence on all subprocessors to ensure they maintain adequate privacy and security practices and enter into contractual agreements requiring them to protect personal data in accordance with applicable laws.

Hosting and Infrastructure Services

These services provide hosting, content delivery, and backend infrastructure.

Data Processed: IP addresses, trackers, usage data, request headers, cookies, all types of personal data collected by the Application

Authentication and Identity Services

These services enable secure user authentication, enterprise SSO, and identity management.

Data Processed: Email address, first name, last name, company name, organization name, user roles and permissions, authentication tokens, directory sync data, employee directory information, usage data

Artificial Intelligence Services

Saturation 3.0 offers optional AI features powered by the providers below. These providers process customer data only when a customer has opted into the AI features and those features are used.

The data processed depends on the request and may include the user’s query, submitted content, and relevant workspace or project information that Saturation retrieves to fulfill the request. This information may contain personal data. Customers who have not opted into these features do not have their workspace, project, or personal data sent to these providers by Saturation.

Data Processed: Queries, prompts, submitted content, and workspace or project context used to fulfill an AI request, including personal data contained in that information. The specific data varies according to the customer’s request and the AI feature used.

Document and Content Processing

These services support document and content processing within Saturation, including extracting text from uploaded files and images, analyzing and summarizing content, semantic search, and generating content as part of supported workflows.

Data Processed: Documents, images, extracted text, prompts, and associated user information, which may include email addresses and personal data contained in the content being processed. The specific data depends on the feature used and the content submitted.

Mapping and Geocoding Services

These services convert entered addresses into geographic coordinates and display locations on static maps.

Data Processed: User-entered street addresses, geographic coordinates, IP addresses, and browser/request metadata

Payment Processing Services

These services enable processing of payments and financial transactions.

Data Processed: Billing address, email address, first name, last name, payment info, credit card information, purchase history, usage data

Identity Verification Services

These services enable identity verification and financial account authentication.

Data Processed: First name, last name, email address, phone number, bank account information, transaction data, financial credentials, identity verification documents, usage data

Integration and Automation Services

These services enable integration with third-party services and automation of data flows.

Data Processed: Varies based on specific integrations; may include email address, first name, last name, company name, usage data, workspace and project context, bug descriptions, diagnostics, screenshots, and logs

Email and Messaging Services

These services enable email delivery and message management.

Data Processed: Company name, country, email address, first name, last name, phone number

Customer Support and Communication Services

These services enable customer support, inquiry management, and communication between the Application and users.

Data Processed: Username, email address, first name, last name, phone number, company name, account IDs, messages, chat conversations, communication preferences, message engagement data, feature requests, comments, voting data, usage data, trackers

Analytics Services

These services enable monitoring and analysis of website traffic and user behavior.

Data Processed: Trackers, usage data, IP addresses, user identifiers, device information

Infrastructure Monitoring Services

These services enable monitoring of application performance, operation, and error tracking.

Data Processed: App information, error logs, device information, IP addresses, user identifiers, request data, server logs, trackers, usage data, account metadata

Tag Management Services

These services enable centralized management of tags and scripts.

Data Processed: Trackers

Affiliate and Referral Marketing Services

These services enable management of affiliate and referral programs, tracking referral conversions, and processing partner commissions.

Data Processed: Email address, first name, last name, referral link data, conversion events, commission data, usage data

Data Protection and Your Rights

For information about:

• How we protect your personal data
• Your rights under GDPR, CCPA, and other privacy laws
• How to exercise your data protection rights
• Data retention and deletion practices
• International data transfers

Please refer to our Privacy Policy or contact our Data Protection Officer at dpo@saturation.io.

Changes to Subprocessors

Material Changes

For material changes to service providers that process significant amounts of Personal Data, we will:

• Update this subprocessor list
• Update the "Last Updated" date at the top of this page
• For enterprise customers with contractual notification requirements, provide advance notice via email as specified in your agreement

Non-Material Changes

For non-material changes (such as replacing one analytics provider with a substantially similar provider, or updating infrastructure components), we will update our subprocessors list without separate notification.

Right to Object

If you are a resident of the European Economic Area or a jurisdiction with similar data protection laws, you have the right to object to the use of new service providers in certain circumstances. If we make a material change to service providers and you wish to exercise this right, please contact us at dpo@saturation.io within 30 days of the change notification.

Contact Information

Saturation.io, Inc. 7901 4th St N Suite 300 St. Petersburg, FL 33702 United States

General Inquiries: hello@saturation.io Data Protection Officer: dpo@saturation.io Privacy Manager: Saturation.io, Inc., Attention: Privacy Manager (at the address above)

Additional Information

For questions about specific subprocessors or to request additional information about our data processing practices, please contact us using the information above.

We recommend reviewing this subprocessor list periodically to stay informed about the specific service providers we engage to process personal data.

Note: This subprocessor list is maintained in accordance with our obligations under the General Data Protection Regulation (GDPR), California Consumer Privacy Act (CCPA), and other applicable data protection laws.