Sub-processors
Last updated: April 30, 2026
S.A.M.I. uses third-party services ("sub-processors") to deliver the product. This page lists them, what they do, and where they operate. We update it whenever a sub-processor is added, removed, or materially changed.
Two categories
Coresub-processors are involved in every user's account by default — hosting, database, payments, transactional email. Optional sub-processors are only invoked when the user actively chooses to use them: e.g. Anthropic only sees a request if the user picks a Claude model; GitHub only sees a login if the user signs in with GitHub.
Core sub-processors
| Service | Purpose | Region |
|---|---|---|
| Hetzner Online GmbH | Application hosting (backend API, search, vector DB, cache). | Germany (EU) |
| Cloudflare, Inc. | CDN, DDoS protection, WAF, web frontend hosting (Cloudflare Pages). | United States / global edge |
| Supabase, Inc. | Managed PostgreSQL — account, billing, and operational data. | EU (eu-west-1) |
| Stripe, Inc. | Payment processing, subscription billing, invoicing, tax calculation. | United States / EU |
| Resend, Inc. | Transactional email (verification, password reset, team invites, receipts). | United States |
Optional sub-processors
Each entry below is only contacted when the user makes the corresponding choice (model selection, OAuth provider, etc.). No data is sent to an optional sub-processor without that explicit selection.
| Service | Purpose | Region |
|---|---|---|
| Anthropic PBC | Model inference when the user selects a Claude model. | United States |
| OpenAI, L.L.C. | Model inference when the user selects a GPT model. | United States |
| Google LLC | Model inference when the user selects a Gemini model. Google OAuth login. | United States / EU |
| xAI Corp. | Model inference when the user selects a Grok model. | United States |
| Mistral AI SAS | Model inference when the user selects a Mistral model. | France (EU) |
| DeepSeek | Model inference when the user selects a DeepSeek model. | China |
| Groq, Inc. | Accelerated inference for selected open-source models. | United States |
| Together AI, Inc. | Inference for selected open-source models. | United States |
| Cohere Inc. | Model inference when the user selects a Cohere model. | Canada |
| OpenRouter, Inc. | Model aggregator for less-common providers. | United States |
| GitHub, Inc. | GitHub OAuth login (only for users who choose to sign in with GitHub). | United States |
| Microsoft Corporation | Microsoft OAuth login (only for Team-plan domain-locked single sign-on). | United States |
International transfers
Where data is transferred outside of the EU/EEA, it is covered either by an EU adequacy decision or by Standard Contractual Clauses (SCCs) executed with the respective sub-processor. The Privacy Policy details the transfer mechanism per category.
Notification of changes
Material changes to this list are announced at least 30 days in advance to active Team and Enterprise customers via email. Free and Pro users can track changes via the changelog or by writing to contact@sami-agent.com.
Questions or objections
If you object to a specific sub-processor or need a Data Processing Agreement, write to contact@sami-agent.com.