Subprocessors — SOPdesk

Datatronics LLC (d/b/a SOPdesk) uses the following third-party service providers ("subprocessors") to operate the Service. Each provider processes data only as needed to perform its function. We update this page when providers are added or replaced; material changes are reflected in the "Last updated" date above.

Supabase

United States

Purpose: Database, authentication, and file storage

Data processed: All account data and customer content (SOPs, training records, documents), encrypted at rest

Railway

United States

Purpose: Application hosting

Data processed: Data in transit through the application servers

Cloudflare

Global edge network (US-based company)

Purpose: Content delivery, DDoS protection, and traffic filtering

Data processed: Network traffic metadata (IP addresses, request headers)

Stripe

United States

Purpose: Payment processing and subscription billing

Data processed: Billing name, email, and payment card details (card data never touches our servers)

Resend

United States

Purpose: Transactional email delivery

Data processed: Email address and message content of service emails

OpenRouter

United States

Purpose: AI request routing for AI features

Data processed: Content you submit to AI features (e.g., SOP text, assistant questions), routed to the inference providers below

AI inference providers (via OpenRouter)

United States (GPU infrastructure may be global)

Purpose: Run the AI models behind AI features

Data processed: Content you submit to AI features, processed transiently to generate a response. Every request is restricted — enforced per-request in our code — to Zero Data Retention endpoints whose operators do not store submitted content or train models on it. Providers currently serving under this restriction include AtlasCloud, Novita, Parasail, and Together.

Notes

AI providers (OpenRouter and its routed inference providers) receive your content only when you actively use an AI feature. Content created without AI features is not sent to them. See our Privacy Policy for details.
Every AI request we send carries OpenRouter's zdr (Zero Data Retention) and data_collection: deny routing restrictions, which exclude any inference endpoint that stores submitted content or uses it to train models. The named providers above may change as OpenRouter's eligible endpoint list evolves, but the restriction itself applies to all of them.
SOPdesk is not intended for Protected Health Information (PHI) — see our HIPAA Position.

Questions

Datatronics LLC (d/b/a SOPdesk) — Privacy Team

Email: [email protected]

Address: 4406 E Main St, Suite 102, PMB 1002, Mesa, AZ 85205