Subprocessor List
Providers used for the described Service functions, their processing roles and relevant locations.
Applicability is identified with the published package and the recorded acceptance or notified effective time. Publication and activation dates are maintained separately from this document.
Current providers and processing roles
#This schedule describes the providers used for the indicated functions. Not every provider receives every data category or is used by every feature. For End Customer data processed on a Customer's instructions, Kasura acts as processor; providers performing that processing for Kasura are subprocessors. Providers may separately act as controllers for their own account, security, legal or payment purposes. Operator-selected integrations may involve additional parties outside this schedule. Provider contracting affiliates and additional facilities follow the applicable account terms; contact privacy@kasura.app for details.
| Provider and role | Purpose and data | Locations | Terms |
|---|---|---|---|
| Google Firebase / Google Cloud | Hosting delivery, authentication, Firestore database, file storage, application functions and operational infrastructure. May process account identifiers, workspace and End Customer records, uploaded media and technical logs; processor/subprocessor for instructed Service data and separate provider processing under its terms. | Primary production database and file storage: Singapore (asia-southeast1); functions: Singapore and US (us-central1). Authentication, delivery, metadata and support may use additional provider locations. | Provider data-processing terms |
| Stripe and its applicable contracting affiliates | SaaS subscription Managed Payments; payment processing for AI Token packs; separately Operator-connected rental payments. May process billing identity, transaction metadata and payment details submitted directly to Stripe. Independent controller/MoR or processor roles depend on the processing and transaction; Stripe is not uniformly a Kasura subprocessor. | US account; international payment, fraud-prevention and support infrastructure under Stripe terms. The applicable seller/MoR is identified at checkout and on the receipt. | Provider data-processing terms |
| OpenAI and its applicable contracting affiliates | Enabled AI API request processing, prompts, relevant business context, outputs and tool proposals; supported images, PDFs and submitted audio for transcription. Processor/subprocessor for instructed requests. Do not include unnecessary personal data. | Configured OpenAI API endpoint; this is not exclusive Singapore processing or zero provider retention. Processing and support locations depend on the applicable API/provider terms. | Provider data-processing terms |
| Functional Software, Inc. d/b/a Sentry | Error monitoring and optional browser diagnostics. May process technical context, URLs, stack traces and submitted diagnostic content. Browser optional capture is gated separately on each origin/device; necessary server operational/security monitoring is distinct. | Provider processing and support locations under Sentry terms; no exclusive regional restriction is represented. | Provider data-processing terms |
| Resend and its applicable contracting entity | Transactional email delivery. May process recipient addresses, message content, configured attachments and delivery metadata; processor/subprocessor for instructed email and provider account processing under its terms. | Primary processing in the United States with provider delivery/support processing under its terms. | Provider data-processing terms |
How we select subprocessors
#We choose subprocessors that are appropriate for the function they perform — hosting, authentication, payments, email, or diagnostics. We expect providers to maintain reasonable security practices for the data they process on our behalf.
Formal due-diligence documentation and contractual data-processing terms between Kasura and Operators are set out in the Data Processing Addendum. Security practices are described on the Security page.
When selecting subprocessors, we consider factors such as security practices, operational reliability, privacy commitments, technical capabilities, and suitability for the services they provide.
We seek to ensure that subprocessors receive access only to the information reasonably necessary for the functions they perform on our behalf.
International processing and safeguards
#Kasura and its providers may process personal data outside the individual's country, including Singapore, the United States and other locations used for provider delivery and support. Where applicable law requires safeguards for an international transfer, appropriate safeguards required by that law apply. The published Google Cloud, Stripe, Sentry and Resend data-processing terms describe Standard Contractual Clauses and applicable jurisdiction-specific arrangements. Provider terms do not establish that every transfer or every Kasura account uses the same mechanism. No universal adequacy, Data Privacy Framework participation or zero-retention assurance is given. Contact privacy@kasura.app for information about the safeguards applicable to the relevant processing.
Updates and notifications
#Intended subprocessor changes require notice and an updated archived list under the DPA, not only when judged materially significant. You may contact legal@kasura.app with questions about this list. Personal data handling is also described in our Privacy Notice.
Questions regarding a specific subprocessor, its role, or the categories of data it may process can be directed to legal@kasura.app.
This page is intended as a transparency resource and should be read together with our Data Processing Addendum, Privacy Notice, and Security page.
Provider and contacts
#Kasura LLC, 30 N Gould St Ste N, Sheridan, WY 82801, United States. Legal: legal@kasura.app. Privacy: privacy@kasura.app. Billing: billing@kasura.app. Support: support@kasura.app. Security: security@kasura.app. These contact channels do not provide a 24/7 service, guaranteed response time or service-level agreement.
Need help?
Questions about this page?
We're happy to help with anything legal, security or privacy related. Reach out and a human will get back to you.