Saluca — Sub-processor Register
Effective / last updated: July 8, 2026
Saluca LLC engages the third-party sub-processors below to help provide the hosted Services (Asphodel and the PEP-configuration add-on). This page is referenced by our Privacy Policy and Data Processing Agreement.
Self-hosted Tiresias-ZT. Tiresias-ZT runs on the customer's own infrastructure. Saluca does not receive or process the customer's governed data, so no Saluca sub-processor touches it. The only exception is the optional, opt-in Enterprise/MSSP central control-plane and signed-audit shipping, which is hosted on the infrastructure below.
Current sub-processors
| Sub-processor | Purpose | Data processed | Location |
|---|---|---|---|
| Google Cloud Platform (Google LLC) | Cloud hosting, compute, storage, managed database | Account identifiers, Asphodel customer content (memory + queries), usage/audit logs | United States |
| Stripe, Inc. | Payment processing & subscription billing | Billing contact and Stripe customer/subscription identifiers (Stripe holds payment-card data; Saluca does not store it) | United States |
| WorkOS, Inc. | Authentication, SSO/OIDC, passkeys | Account email, optional name, authentication events | United States |
| Resend | Transactional email (receipts, license/onboarding, security notices) | Recipient email address and message content | United States |
| Cloudflare, Inc. | DNS, CDN, WAF, bot mitigation | IP address and request metadata | Global edge network |
| Supabase (marketing website only) | Website waitlist / leads database | Lead email and submitted form fields | United States |
Changes to this list
Saluca will provide at least 30 days' advance notice before adding or replacing a sub-processor that processes personal data, by updating this page and notifying customers who subscribe to updates. Customers may object as described in the Data Processing Agreement.
Contact
Questions about our sub-processors: privacy@saluca.com.