Snapshot 231695

Document

Subprocessor list

URL

https://sahha.ai/security/subprocessors/

Fetched

2026-11-07 12:18:58 UTC

HTTP status

200

Content type

text/html

Fetch mode

static

Size

69442 bytes

SHA-256 (raw)

a8e2920fb1c6c8f4468af3fc0a267eff998651dff00267dd16984281dc4f4791

SHA-256 (normalized text)

af5e5d322f7f0411078de27fa5d774996e2ad9caed25a46e25fbc07f91d8e4de

Parsed

What we read from this document, as JSON. Each entry names the snapshot it was read from.

{
  "entries": [
    {
      "kind": "subprocessor",
      "vendor": "amazon-web-services",
      "evidence_id": 231695,
      "data": {
        "name": "Amazon Web Services (AWS)",
        "purposes": [
          "Cloud hosting, storage, and compute for all data processing"
        ],
        "sections": [
          "Sub-processors"
        ],
        "locations": [
          "United States (us-east-1)"
        ],
        "data_categories": [
          "All customer health data and derived outputs"
        ]
      }
    },
    {
      "kind": "subprocessor",
      "vendor": "attio",
      "evidence_id": 231695,
      "data": {
        "name": "Attio",
        "purposes": [
          "Customer relationship management"
        ],
        "sections": [
          "Service providers"
        ],
        "locations": [
          "United States"
        ],
        "data_categories": [
          "Names and contact details of customer staff we deal with."
        ]
      }
    },
    {
      "kind": "subprocessor",
      "vendor": "okta",
      "evidence_id": 231695,
      "data": {
        "name": "Auth0",
        "purposes": [
          "Authentication for Sahha dashboard users"
        ],
        "sections": [
          "Service providers"
        ],
        "locations": [
          "United States"
        ],
        "data_categories": [
          "Dashboard account credentials only. No health data of any kind."
        ]
      }
    },
    {
      "kind": "subprocessor",
      "vendor": "hubspot",
      "evidence_id": 231695,
      "data": {
        "name": "HubSpot",
        "purposes": [
          "Customer relationship management"
        ],
        "sections": [
          "Service providers"
        ],
        "locations": [
          "United States"
        ],
        "data_categories": [
          "Names and contact details of customer staff we deal with."
        ]
      }
    },
    {
      "kind": "subprocessor",
      "vendor": "microsoft",
      "evidence_id": 231695,
      "data": {
        "name": "Microsoft 365",
        "purposes": [
          "Support email"
        ],
        "sections": [
          "Sub-processors"
        ],
        "locations": [
          "United States"
        ],
        "data_categories": [
          "Profile and external identifiers, where these come up in a support conversation."
        ]
      }
    },
    {
      "kind": "subprocessor",
      "vendor": "netlify",
      "evidence_id": 231695,
      "data": {
        "name": "Netlify",
        "purposes": [
          "Hosting for the Sahha dashboard web application"
        ],
        "sections": [
          "Service providers"
        ],
        "locations": [
          "United States"
        ],
        "data_categories": [
          "Application hosting and account data. No health data: the dashboard fetches it from the Sahha API directly."
        ]
      }
    },
    {
      "kind": "subprocessor",
      "evidence_id": 231695,
      "data": {
        "name": "Sahha (New Zealand) Limited",
        "purposes": [
          "Group affiliate: engineering, research and support"
        ],
        "sections": [
          "Sub-processors"
        ],
        "affiliate": true,
        "locations": [
          "New Zealand"
        ],
        "data_categories": [
          "Customer health data and derived outputs, accessed by authorised personnel to operate, support and improve the Services."
        ]
      }
    },
    {
      "kind": "subprocessor",
      "vendor": "slack",
      "evidence_id": 231695,
      "data": {
        "name": "Slack",
        "purposes": [
          "Support channels shared with customers"
        ],
        "sections": [
          "Sub-processors"
        ],
        "locations": [
          "United States"
        ],
        "data_categories": [
          "Profile and external identifiers, where these come up in a support conversation. No health permissions data or raw wearable data."
        ]
      }
    },
    {
      "kind": "subprocessor",
      "vendor": "stripe",
      "evidence_id": 231695,
      "data": {
        "name": "Stripe",
        "purposes": [
          "Billing and subscription management"
        ],
        "sections": [
          "Service providers"
        ],
        "locations": [
          "United States"
        ],
        "data_categories": [
          "Billing contact and payment details for the customer account."
        ]
      }
    }
  ]
}