Effective / last updated: July 8, 2026
Saluca LLC engages the third-party sub-processors below to help provide the hosted Services (Asphodel and the PEP-configuration add-on). This page is referenced by our Privacy Policy and Data Processing Agreement.
Self-hosted Tiresias-ZT. Tiresias-ZT runs on the customer's own infrastructure. Saluca does not receive or process the customer's governed data, so no Saluca sub-processor touches it. The only exception is the optional, opt-in Enterprise/MSSP central control-plane and signed-audit shipping, which is hosted on the infrastructure below.
| Sub-processor | Purpose | Data processed | Location |
|---|---|---|---|
| Google Cloud Platform (Google LLC) | Cloud hosting, compute, storage, managed database | Account identifiers, Asphodel customer content (memory + queries), usage/audit logs | United States |
| Stripe, Inc. | Payment processing & subscription billing | Billing contact and Stripe customer/subscription identifiers (Stripe holds payment-card data; Saluca does not store it) | United States |
| WorkOS, Inc. | Authentication, SSO/OIDC, passkeys | Account email, optional name, authentication events | United States |
| Resend | Transactional email (receipts, license/onboarding, security notices) | Recipient email address and message content | United States |
| Cloudflare, Inc. | DNS, CDN, WAF, bot mitigation | IP address and request metadata | Global edge network |
| Supabase (marketing website only) | Website waitlist / leads database | Lead email and submitted form fields | United States |
Saluca will provide at least 30 days' advance notice before adding or replacing a sub-processor that processes personal data, by updating this page and notifying customers who subscribe to updates. Customers may object as described in the Data Processing Agreement.
Questions about our sub-processors: privacy@saluca.com.