Sub-processors

Last updated July 14, 2026

SynapBridge (Elevayt Ventures LLC) engages the sub-processors listed below to help provide the Service. Each is bound by a written contract that requires it to protect personal data on terms consistent with our Privacy Policy and Data Processing Addendum. Enterprise customers receive at least 30 days advance notice of any addition or replacement via the process described in the DPA, and may object per the DPA.

Note. This page reflects the operating practices SynapBridge follows today. Enterprise customers who require a counter-signed Master Services Agreement or a bespoke Data Processing Addendum for procurement or audit review can email legal@synapbridge.com.

1. Sub-processor list

The following third parties process personal data on our behalf as of the effective date above.

Sub-processor	Processing purpose	Data location	Transfer mechanism
Amazon Web Services, Inc. Amazon Web Services, Inc., 410 Terry Ave. N, Seattle, WA 98109, USA	Cloud infrastructure, compute, storage, KMS-managed encryption, CDN.	United States (us-east-1 default); EEA (eu-west-1) or APAC (ap-southeast-1) on Business and Enterprise plans.	AWS DPA + EU Standard Contractual Clauses (2021/914) + UK IDTA.
Stripe, Inc. Stripe, Inc., 354 Oyster Point Blvd., South San Francisco, CA 94080, USA	Subscription billing, payment card processing, tax computation, invoicing.	United States; EEA processing for EU customers via Stripe Payments Europe, Ltd.	Stripe DPA + EU Standard Contractual Clauses.
WorkOS, Inc. WorkOS, Inc., 2261 Market Street #4149, San Francisco, CA 94114, USA	Authentication, session management, enterprise single-sign-on, directory federation.	United States.	WorkOS DPA + EU Standard Contractual Clauses.
Amazon Cognito (AWS) Amazon Web Services, Inc., 410 Terry Ave. N, Seattle, WA 98109, USA	Legacy authentication for accounts created before the WorkOS migration; scheduled for retirement.	United States (us-east-1).	AWS DPA + EU Standard Contractual Clauses.
Amazon Simple Email Service (AWS) Amazon Web Services, Inc., 410 Terry Ave. N, Seattle, WA 98109, USA	Transactional email delivery (verification, invoices, security alerts, policy notices).	United States (us-east-1).	AWS DPA + EU Standard Contractual Clauses.
Cloudflare, Inc. Cloudflare, Inc., 101 Townsend St., San Francisco, CA 94107, USA	DNS resolution and edge DDoS protection for synapbridge.com.	Global edge; DNS metadata processed in the United States.	Cloudflare DPA + EU Standard Contractual Clauses.

2. Third-party AI providers you connect

When you connect a third-party AI provider (OpenAI, Anthropic, Google Cloud Vertex AI or Gemini, Microsoft Azure OpenAI, AWS Bedrock, or others) to the Service, that provider processes your Inputs and Outputs under its own terms and privacy policy as an independent controller or independent processor. Those providers are NOT our sub-processors; we do not resell inference credits, and the direct relationship, billing, and terms are between you and the provider. See the Privacy Policy sections 6 and 7 for details on Google and Microsoft API data handling.

3. Changes to this list

We may add or replace sub-processors from time to time. Enterprise customers who have signed our DPA will receive advance notice per the DPA. The current list is always available at https://synapbridge.com/legal/sub-processors.

4. Contact

Questions about a specific sub-processor, or objections raised under the DPA, should go to privacy@synapbridge.com.