Sub-processors
Saturation.io Sub-processor List
Last Updated: November 17, 2025
Introduction
This document lists all third-party sub-processors engaged by Saturation.io, Inc. ("Saturation.io") to process personal data on behalf of our customers and users. In accordance with our Privacy Policy and applicable data protection laws (including GDPR and CCPA), we maintain this list to provide transparency about our data processing practices.
We conduct appropriate due diligence on all sub-processors to ensure they maintain adequate privacy and security practices and enter into contractual agreements requiring them to protect personal data in accordance with applicable laws.
AI Services and Content Processing
These services enable AI-powered features including document generation, content analysis, semantic search, and real-time information access.
Subprocessor | Entity | Location | Purpose | Privacy Policy |
OpenAI | OpenAI, L.L.C. | United States | AI service enabling document generation, content analysis, and research capabilities | |
Claude AI | Anthropic, PBC | United States | AI service enabling document generation, content analysis, and research capabilities | |
Google AI Studio | Google LLC | United States | AI service enabling content generation, analysis, and multimodal AI capabilities including text and image processing | |
xAI (Grok) | xAI Corp. | United States | AI service enabling content generation, analysis, and research capabilities with real-time information access | |
Weaviate | Weaviate B.V. | Netherlands | Vector database service enabling AI-powered semantic search, content recommendations, and intelligent data retrieval |
Data Processed: Email address, user-generated content, documents, images, prompts, search queries, Usage Data
Analytics Services
These services enable monitoring and analysis of website traffic and user behavior.
Subprocessor | Entity | Location | Purpose | Privacy Policy |
Google Analytics | Google LLC | United States | Web analysis service for tracking and examining application usage | |
Meta Pixel | Meta Platforms, Inc. | United States | Analytics service connecting data from Meta Audience Network with actions performed on the Application | |
MixPanel | Mixpanel Inc. | United States | Analytics service for tracking user behavior | |
PostHog | PostHog, Inc. | United States | Product analytics platform tracking user behavior and application usage |
Data Processed: Trackers, Usage Data, IP addresses, session recordings, user identifiers, device information
Authentication and Identity Services
These services enable secure user authentication, enterprise SSO, and identity management.
Subprocessor | Entity | Location | Purpose | Privacy Policy |
WorkOS | WorkOS, Inc. | United States | Authentication and enterprise SSO service enabling secure user authentication, single sign-on, and directory synchronization |
Data Processed: Email address, first name, last name, company name, organization name, user roles and permissions, authentication tokens, directory sync data, employee directory information, Usage Data
Customer Support and Communication Services
These services enable customer support, inquiry management, and communication between the Application and users.
Subprocessor | Entity | Location | Purpose | Privacy Policy |
Discord | Discord Inc. | United States | Communication platform for customer support and community engagement | |
Intercom | Intercom, Inc. | United States | Customer support and communication service | |
Loops | Loops, Inc. | United States | Email communication service for transactional and marketing communications |
Data Processed: Username, email address, first name, last name, phone number, company name, messages, chat conversations, communication preferences, message engagement data, Usage Data
External Content Display Services
These services allow viewing content from external platforms directly within the Application.
Subprocessor | Entity | Location | Purpose | Privacy Policy |
Google Maps | Google LLC | United States | Maps visualization service | |
Google Fonts | Google LLC / Google Ireland Limited | United States / Ireland | Typeface visualization service |
Data Processed: Trackers, Usage Data
Payment Processing Services
These services enable processing of payments and financial transactions.
Subprocessor | Entity | Location | Purpose | Privacy Policy |
Stripe | Stripe, Inc. | United States | Payment processing service | |
CapitalOS | CapitalOS, Inc. | United States | Credit card and payment processing service |
Data Processed: Billing address, email address, first name, last name, payment info, credit card information, purchase history, Usage Data
Hosting and Infrastructure Services
These services provide hosting, content delivery, and backend infrastructure.
Subprocessor | Entity | Location | Purpose | Privacy Policy |
Cloudflare | Cloudflare, Inc. | United States | Content delivery network (CDN), DNS, security, and performance optimization service | |
DigitalOcean | DigitalOcean Inc. | United States | Hosting service | |
Render | Render Services, Inc. | United States | Cloud hosting and database service hosting the Application's infrastructure and user data | |
SiteGround | SiteGround Hosting Ltd., SG Hosting Inc., SiteGround Spain S.L. | United Kingdom, United States, Netherlands, Singapore, Spain | Hosting service | |
Vercel | Vercel Inc. | United States | Hosting and deployment platform for web interfaces and user-facing applications |
Data Processed: IP addresses, Trackers, Usage Data, request headers, cookies, all types of Personal Data collected by the Application
Identity Verification Services
These services enable identity verification and financial account authentication.
Subprocessor | Entity | Location | Purpose | Privacy Policy |
Plaid | Plaid Inc. | United States | Identity verification and financial account authentication service |
Data Processed: First name, last name, email address, phone number, bank account information, transaction data, financial credentials, identity verification documents, Usage Data
Infrastructure Monitoring Services
These services enable monitoring of application performance, operation, and error tracking.
Subprocessor | Entity | Location | Purpose | Privacy Policy |
BetterStack | Better Stack, Inc. | United States | Infrastructure monitoring and log management service enabling application performance monitoring, uptime tracking, and error tracking | |
Bugsnag | Bugsnag Inc. | United States | Application monitoring and error tracking service | |
Sentry | Functional Software, Inc. | United States | Application monitoring and error tracking service |
Data Processed: App information, error logs, device information, IP addresses, user identifiers, request data, server logs, Trackers, Usage Data
Integration and Automation Services
These services enable integration with third-party services and automation of data flows.
Subprocessor | Entity | Location | Purpose | Privacy Policy |
Zapier | Zapier, Inc. | United States | Automation platform facilitating data integration between the Application and other services |
Data Processed: Varies based on specific integrations; may include email address, first name, last name, company name, Usage Data
Email and Messaging Services
These services enable email delivery and message management.
Subprocessor | Entity | Location | Purpose | Privacy Policy |
Postmark | Wildbit LLC | United States | Email address management and message sending service |
Data Processed: Company name, country, email address, first name, last name, phone number
Tag Management Services
These services enable centralized management of tags and scripts.
Subprocessor | Entity | Location | Purpose | Privacy Policy |
Google Tag Manager | Google LLC / Google Ireland Limited | United States / Ireland | Tag management service |
Data Processed: Trackers
User Database Management Services
These services enable building and managing user profiles and customer relationships.
Subprocessor | Entity | Location | Purpose | Privacy Policy |
Attio | Attio Ltd. | United Kingdom | Customer relationship management (CRM) service storing and managing customer data and relationship information |
Data Processed: Company name, email address, first name, last name, phone number, physical address, customer interaction history, Usage Data
Data Protection and Your Rights
For information about:
How we protect your personal data
Your rights under GDPR, CCPA, and other privacy laws
How to exercise your data protection rights
Data retention and deletion practices
International data transfers
Please refer to our Privacy Policy or contact our Data Protection Officer at dpo@saturation.io.
Changes to Subprocessors
Material Changes
For material changes to service providers that process significant amounts of Personal Data, we will:
Update this subprocessor list
Update the "Last Updated" date at the top of this page
For enterprise customers with contractual notification requirements, provide advance notice via email as specified in your agreement
Non-Material Changes
For non-material changes (such as replacing one analytics provider with a substantially similar provider, or updating infrastructure components), we will update our subprocessors list without separate notification.
Right to Object
If you are a resident of the European Economic Area or a jurisdiction with similar data protection laws, you have the right to object to the use of new service providers in certain circumstances. If we make a material change to service providers and you wish to exercise this right, please contact us at dpo@saturation.io within 30 days of the change notification.
Contact Information
Saturation.io, Inc.
7901 4th St N Suite 300
St. Petersburg, FL 33702
United States
General Inquiries: hello@saturation.io
Data Protection Officer: dpo@saturation.io
Privacy Manager: Saturation.io, Inc., Attention: Privacy Manager (at the address above)
Additional Information
For questions about specific sub-processors or to request additional information about our data processing practices, please contact us using the information above.
We recommend reviewing this sub-processor list periodically to stay informed about the specific service providers we engage to process personal data.
Note: This sub-processor list is maintained in accordance with our obligations under the General Data Protection Regulation (GDPR), California Consumer Privacy Act (CCPA), and other applicable data protection laws.