Current Subprocessor List
| Vendor | Purpose | Regions | Data Categories | Safeguards |
|---|---|---|---|---|
| Neon | Managed Postgres hosting | US, EU | Account metadata, usage records | Contractual security and confidentiality terms |
| Stripe | Payment processing and invoicing | Global | Billing identifiers, transaction records | Payment compliance controls and restricted data scope |
| Vercel | Dashboard hosting and delivery | Global | Web request metadata, deployment logs | Access controls and platform security commitments |
| Upstash | Rate-limiting and cache infrastructure | Global | API key hash references, throttle counters | Network and data access controls under vendor agreement |
Change Management
Sylica reviews subprocessor vendors for security, privacy, and contractual adequacy. Material changes are reflected on this page.
Onboarding and Due Diligence
Subprocessors are evaluated for security posture, privacy alignment, contractual obligations, and operational reliability before activation.
Customer Notices and Questions
Questions regarding subprocessors or processing scope can be directed to privacy@sylicaai.com and legal@sylicaai.com.