# Subprocessors
URL: https://samva.dev/legal/subprocessors
> See the providers that help operate Samva, the services they perform, and their processing locations or data-handling posture.
- Version: 1.3
- Effective: 2026-09-07



## Current Providers [#current-providers]

Arya Labs, Inc. uses the providers below to operate Samva. A provider may process account information, Customer Content, recipient information, telemetry, billing information, or other data only as needed for its service.

<div className="overflow-x-auto">
  <table>
    <thead>
      <tr>
        <th scope="col">
          Provider
        </th>

        <th scope="col">
          Service
        </th>

        <th scope="col">
          Location or posture
        </th>
      </tr>
    </thead>

    <tbody>
      <tr>
        <td>
          Amazon Web Services
        </td>

        <td>
          Compute, storage, queues, email infrastructure, and key management
        </td>

        <td>
          Primary application infrastructure is AWS us-east-1; some services are global
        </td>
      </tr>

      <tr>
        <td>
          Cloudflare
        </td>

        <td>
          Web edge, Workers, routing, assets, security, and Turnstile
        </td>

        <td>
          Global network; location varies by service
        </td>
      </tr>

      <tr>
        <td>
          PlanetScale
        </td>

        <td>
          Production relational database
        </td>

        <td>
          AWS us-east-1 / N. Virginia
        </td>
      </tr>

      <tr>
        <td>
          Upstash
        </td>

        <td>
          Redis-compatible secondary state and rate limits
        </td>

        <td>
          Region varies by deployment
        </td>
      </tr>

      <tr>
        <td>
          Autumn
        </td>

        <td>
          Billing, plans, usage, entitlements, and subscriptions
        </td>

        <td>
          Location varies by provider service
        </td>
      </tr>

      <tr>
        <td>
          Stripe
        </td>

        <td>
          Payment processing and billing support
        </td>

        <td>
          Subject to Stripe’s service and privacy documentation
        </td>
      </tr>

      <tr>
        <td>
          Axiom
        </td>

        <td>
          Shared telemetry datasets for events and traces
        </td>

        <td>
          Location and retention vary by configuration
        </td>
      </tr>

      <tr>
        <td>
          PostHog
        </td>

        <td>
          Website and product analytics, and session replay on public pages
        </td>

        <td>
          United States; cookieless by default, cookies and replay only after consent
        </td>
      </tr>

      <tr>
        <td>
          Google
        </td>

        <td>
          Website analytics for public pages through Google Analytics
        </td>

        <td>
          Location determined by Google; cookieless pings by default, a stored identifier only
          after consent
        </td>
      </tr>

      <tr>
        <td>
          Cloudflare Turnstile
        </td>

        <td>
          Bot and abuse protection
        </td>

        <td>
          Global Cloudflare service
        </td>
      </tr>
    </tbody>
  </table>
</div>

Better Auth is a self-hosted library used in Samva’s application and is not itself a Samva subprocessor. Svix is not listed as a direct Samva subprocessor; any downstream processing by a billing provider is governed by that provider’s own disclosure and contractual chain.

## Subprocessor Changes [#subprocessor-changes]

Arya Labs will provide at least 14 days’ advance notice of additions or replacements by updating this page or using another reasonable notice channel. Customers may object on reasonable data-protection grounds as described in the Data Processing Addendum.

## Contact [#contact]

Subprocessor questions: [privacy@samva.dev](mailto:privacy@samva.dev)