Subprocessors
Last updated November 3, 2026·Version 1.8
Current Providers
Arya Labs, Inc. uses the providers below to operate Samva. A provider may process account information, Customer Content, recipient information, telemetry, billing information, or other data only as needed for its service.
| Provider | Service | Location or posture |
|---|---|---|
| Amazon Web Services | Compute, storage, queues, email infrastructure, and key management | Primary application infrastructure is AWS us-east-1; some services are global |
| Cloudflare | Web edge, Workers, routing, assets, security, Turnstile, and Workers AI for inbound mail screening and organization trust checks | Global network; location varies by service |
| Cloudflare | AI Gateway for Samva Agents | Full prompts and model responses are logged, and zero data retention is off |
| PlanetScale | Production relational database | AWS us-east-1 / N. Virginia |
| Upstash | Redis-compatible secondary state and rate limits | Region varies by deployment |
| Autumn | Billing, plans, usage, entitlements, and subscriptions | Location varies by provider service |
| Stripe | Payment processing and billing support | Subject to Stripe’s service and privacy documentation |
| Axiom | Shared telemetry datasets for events and traces | Location and retention vary by configuration |
| PostHog | Website and product analytics, and session replay on public pages | United States; cookieless by default, cookies and replay only after consent |
| Website analytics for public pages through Google Analytics | Location determined by Google; cookieless pings by default, a stored identifier only after consent | |
Google Calendar API, for organizations that connect a calendar to a Samva agent. New connections request calendar.events.owned (events on calendars the user owns) and calendar.freebusy (view your availability in your calendars). A calendar connected before this change can keep its earlier calendar.events grant (view and edit events on all your calendars), including after it is reconnected, until that grant is revoked. | Location determined by Google | |
| Meta Platforms | WhatsApp Business Platform: Embedded Signup and the WhatsApp Cloud API, for organizations that connect a WhatsApp Business Account | Location determined by Meta; subject to Meta’s WhatsApp Business terms |
| Anthropic | Claude models for the AI email editor and for Samva Agents’ replies to customer conversations, and Claude models an organization owner pins for a Samva agent. Requests for pinned models reach Anthropic directly through the Cloudflare AI Gateway listed above. Prompts and completions | United States |
| OpenRouter | Model routing for the AI email editor’s default model and for Samva Agents’ replies to customer conversations, and for every other model, besides Anthropic and OpenAI models, that an organization owner pins for a Samva agent. OpenRouter forwards the request to the provider that hosts the chosen model, as listed in OpenRouter’s provider list. Prompts and completions in transit | United States |
| Fireworks AI | Hosted open-weight model inference for the AI email editor and for Samva Agents’ replies to customer conversations. Prompts and completions | United States |
| OpenAI | Models for organization trust review, and OpenAI models an organization owner pins for Samva Agents’ replies to customer conversations, reached directly through the Cloudflare AI Gateway listed above. Prompts and completions | Subject to OpenAI’s service and privacy documentation |
| Supermemory | Agent memory for Samva Agents: facts about a contact, searches of that memory, and an organization’s knowledge | Subject to Supermemory’s service documentation |
| Cloudflare Turnstile | Bot and abuse protection | Global Cloudflare service |
Better Auth is a self-hosted library used in Samva’s application and is not itself a Samva subprocessor. Svix is not listed as a direct Samva subprocessor; any downstream processing by a billing provider is governed by that provider’s own disclosure and contractual chain.
Subprocessor Changes
Arya Labs will provide at least 14 days’ advance notice of additions or replacements by updating this page or using another reasonable notice channel. Customers may object on reasonable data-protection grounds as described in the Data Processing Addendum.
Contact
Subprocessor questions: privacy@samva.dev