Subprocessors

Last updated 9 October 2026.

These companies process customer data on Sundr's behalf. We tell customers about changes to this list by email.

Subprocessor	Purpose	Data involved	Location
Fly.io	Hosting. Runs the website, the audit worker, the proxy and the databases.	Everything Sundr stores: uploaded logs (encrypted), reports, audit records, workspaces, tasks and proxy call logs.	United States (Ashburn, Virginia)
Cloudflare	DNS, CDN and TLS for sundr.ai and proxy.sundr.ai; Web Analytics (cookieless page-view counts) on sundr.ai.	All requests and responses in transit, including uploads, proxy requests and their headers.	Cloudflare's global network, at the data center nearest the visitor
Cloudflare Workers AI	Runs the Clef decision model.	The text of logged and live judgment calls, with Sundr's questions about them.	Cloudflare's global network
OpenRouter	Routes decision-model requests to TypeSafe's Jev model.	The text of logged and live judgment calls, with Sundr's questions about them.	United States
TypeSafe	Runs the Jev decision model. Requests reach it through OpenRouter.	The same data as OpenRouter.	Not yet confirmed
Anthropic	Claude drafts questions about each task.	A sample of up to 60 logged calls per audit or task certification, with the task description and its possible verdicts.	United States
Resend	Sends email.	Your email address and the email contents, such as confirmation and report links.	United States

Not listed here

Your own LLM provider. The proxy forwards your requests to the provider you already use, such as OpenAI or Anthropic, with your own API key. That provider works under your agreement with them. Anthropic appears above only for question drafting, which runs on Sundr's account.
Google Fonts. Pages on sundr.ai, including reports, load fonts from Google Fonts, so your browser contacts Google when it opens them. No customer data is sent to Google.