Last updated: 3 November 2026

To provide Sasana AI, PT Davel Surya Cipta ("Sasana AI") engages the third-party service providers ("sub-processors") listed below. They may process Customer Data, including the personal data of our customers' end customers, on our behalf and only for the purposes stated.

Each sub-processor is bound by written data protection terms that are no less protective than those in our Terms and Conditions, Section G. Where personal data is transferred outside Indonesia or outside the European Economic Area, we rely on UU PDP Article 56 and, for data subject to GDPR, the EU-US Data Privacy Framework or the European Commission's Standard Contractual Clauses.

We notify Account Owners by email or in the dashboard at least 30 days before adding or replacing a sub-processor. Questions about this list can go to privacy@sasana.ai.

Infrastructure and hosting

Sub-processor	Purpose	Data processed	Location
Microsoft Azure	Application hosting, managed database and cache	All Customer Data	Southeast Asia (Singapore)
Cloudflare (R2)	File storage	Uploaded files and media; data export files	Asia-Pacific
Google Cloud	Knowledge-base storage and vector search	Knowledge-base documents and embeddings	Asia-Pacific
Pinecone	Vector search for knowledge-base ingestion	Knowledge-base content and embeddings	United States

AI and data processing

Sub-processor	Purpose	Data processed	Location
OpenAI	AI model inference	Conversation content; knowledge-base content; analytics questions	United States
Cerebras	AI model inference	Conversation content; knowledge-base context	United States
Google Cloud (Vertex AI Gemini)	AI model inference	Conversation content; contact details mentioned in conversations	Southeast Asia (Singapore)
Anthropic	AI model inference	Conversation content; knowledge-base context	United States
LangSmith	AI monitoring	AI prompts and responses, including conversation content	United States
Firecrawl	Fetching public web pages the customer adds to its knowledge base	Website URLs and public page content	United States
Google Maps Platform	Location lookup in conversations	Addresses or location text from conversations	United States
ElevenLabs	Voice AI for customer-satisfaction calls	Voice audio and transcripts	United States / European Union
Twilio	Voice calls	Phone numbers; call audio	United States

Messaging, notifications and monitoring

Sub-processor	Purpose	Data processed	Location
Ably	Real-time delivery of chat messages to the dashboard and inbox	Live conversation messages and inbox events	United Kingdom (multi-region)
OneSignal	Transactional email and push notifications	Account email addresses; verification, password-reset and data-export emails	United States
New Relic	Application monitoring and logs	Logs and traces, which may contain identifiers	United States
Slack	Internal alerts to the Sasana AI team	Error, handoff and ticket alerts, which may include contact identifiers and conversation excerpts	United States

Payments

Sub-processor	Purpose	Data processed	Location
Stripe	Payment processing	Billing name and email; card data, which is handled by Stripe and never stored by Sasana AI	United States / Ireland
Xendit	Payment processing (Indonesia and Southeast Asia)	Billing name, email and phone; payment data	Indonesia / Singapore

Channels and integrations you connect

The services below are not Sasana AI sub-processors. They are platforms the customer chooses to connect, and they process data on their own platforms under their own terms. Sasana AI exchanges data with them only as needed to deliver the connected channel or integration.

Provider	What it is	Location
Meta (WhatsApp, Instagram)	Messaging channels	United States / Ireland
Telegram	Messaging channel	United Arab Emirates (global data centres)
Google Business Profile	Business reviews and messages	United States
Google Workspace (Drive, Sheets)	Files the customer chooses to connect to its knowledge base or tools	United States

Contact

Questions about our sub-processors or data protection: privacy@sasana.ai.