Trust Center
Subprocessors
Self-hosted deployments can run without SoterAI-operated subprocessors. Managed deployments use the following subprocessors to deliver the service.
| Provider | Purpose | Region | Data Categories |
|---|---|---|---|
| Vercel | Cloud hosting and edge functions | Global (multi-region) | Application logs, metadata |
| Upstash | Redis-compatible rate limiting and caching | us-east-1 / eu-west-1 | Usage counters, rate limit state |
| Resend | Transactional email delivery | us-east-1 | User email address |
| Razorpay | Payment processing and subscription billing | India | Organization billing details |
| Qdrant | Vector store for RAG semantic search | Customer-configured | Document embeddings |
| Tesseract.js | OCR document scanning | In-process (no external transfer) | Document images (transient) |
| Google Cloud KMS | Optional: customer-managed encryption keys | Customer-configured | Encryption key metadata |
| AWS/GCP Observability | Optional: SIEM export and metrics | Customer-configured | Anonymized security events |
Part of the SoterAI Trust Center.Back to overview