Subprocessors.

Who receives what

Sondel does not sell your content, use it for an unrelated purpose, or allow a provider to train a model on it. The providers below process the data needed for their stated role. Handling and retention differ by purpose and data type. The primary database stores sources, conversations, settings, and related records for the periods on the data use and retention page. Model requests, search-vector processing, email delivery, bot checks, and website analytics are separate from that primary storage. Ask Sondel about current provider-specific handling.

Railway

Hosts the Sondel application and this website. It handles everything that passes through Sondel. Railway also runs the public audit request, crawl, and report path. Region: US East.

Neon

Hosts the database that stores sources, conversations, and settings. The public audit service uses a separately controlled audit store in the same database. Its least-privilege role cannot access the main application data. Region: AWS US East (Ohio).

BaseTen

Runs the language model that drafts answers. It receives the customer's question and the source passages used to answer it. The public audit service sends public passages plus Sondel-generated questions and instructions used for audit planning and drafting. It does not receive the audit lead email. The direct audit route has no fallback gateway.

OpenRouter

Routes model requests to a backup model host when the first choice is unavailable. It receives the same content as the model it routes to.

Voyage AI

Turns your documentation and customers' questions into search vectors. It receives the text to be turned into vectors.

Resend

Sends email, such as handoffs to your team and sign-in messages. A handoff email carries the customer's question, the conversation, and the contact email the customer gave. Resend sends verification and private-report links to the audit requester.

Stripe

Handles billing and payment processing. It receives billing details, payment details entered on Stripe's own pages, and a daily count of billable conversations. It receives no conversation text and no source content. Sondel runs this in Stripe's test mode only for now. No customer is billed yet, and early access pilots are free.

Cloudflare Turnstile

Checks each public audit request for automated traffic. Cloudflare receives browser and IP-address data for the challenge. See Cloudflare's Turnstile Privacy Addendum.

Google Analytics

Counts visits to this website only. It receives page addresses and browser data from visitors. It receives no customer content, because the chat widget and the owner area do not use it.

Changes and questions

Notice of changes

Sondel emails your admins 30 days before a new provider that receives customer content is added.

Questions

Write to hello@sondel.cx and ask about any provider. See also data use and retention.