Sub-processors
Last updated: 2026-09-19
To deliver the cloud features we engage sub-processors that process your content — recordings, transcripts and analyses — on our behalf. Under Article 28(2) of the GDPR you are entitled to know who they are and to object to changes. This page is the complete and current list.
All of them process your content within the EU/EEA. It never leaves the Union.
| Sub-processor | Purpose | Country | Sees |
|---|---|---|---|
| Berget.ai (Sweden) | Transcription with KB-Whisper Large and AI summarisation | Sweden | Audio and transcribed text |
| Google Cloud EMEA Ltd. | Hosting and compute; temporary storage of audio during processing, and of transcripts and analyses when cloud sync is on | Finland (europe-north1) | Audio, transcripts and analyses |
| Cloudflare, Inc. | Networking and denial-of-service protection — audio and text pass through their network | EU (traffic terminated within the EU) | Content in transit — nothing stored |
Suppliers that are not sub-processors
Sign-in, payments, product statistics and error reporting are handled by suppliers that never see your content. We are the controller for the data they process, so they are not covered by the Data Processing Agreement. They are described in our privacy policy (in Swedish, at /integritetspolicy).
If you use local mode
If you choose on-device transcription, the audio is processed solely on your own machine. In that case none of the sub-processors above are involved — the audio never leaves the computer. It is the single strongest privacy measure in the product, and it is free.
If we change a sub-processor
We will notify you at least 30 days in advance before adding or replacing a sub-processor, by email or clear notice in the service. You may object during that period.
If we cannot resolve your objection you may terminate the service without penalty, with a refund for any unused prepaid period. The full terms are in section 7 of the Data Processing Agreement.
Changelog
- 2026-09-19 — List limited to the sub-processors that process your content, which is what the Data Processing Agreement covers. The suppliers for sign-in, payments, statistics and error reporting moved to the privacy policy; they never see your content. Cloudflare moved here, since audio and text pass through their network. pyannoteAI removed: speaker separation is switched off, and no audio is sent there. The new scope applies from 2026-10-19. Until then we also give notice of changes to the suppliers that moved, under section 7 of the agreement.
- 2026-08-05 — List published as a dedicated page. Cloudflare added as a sub-processor; it was previously missing from the privacy policy even though all traffic passes through their network. Sentry added for the same reason — found by cross-checking the internal record of processing against the public list.
Questions
Questions about an individual sub-processor, or requests for audit documentation: hej@sagt.ai.