Snapshot 9190

Document
Subprocessor list
URL
https://trust.soraban.com/subprocessors
Fetched
HTTP status
200
Content type
text/html
Fetch mode
browser
Size
69156 bytes
SHA-256 (raw)
047e4976553c7f7b7a859961041403607da0fbdcd40226780c0e86b36ef94a4e
SHA-256 (normalized text)
487642a4c411b294d3bb9b01abd4fc112282535d0b80b724b6c29919dce1a8d0

Parsed

What we read from this document, as JSON. Each entry names the snapshot it was read from.

{
  "entries": [
    {
      "kind": "subprocessor",
      "vendor": "amazon-web-services",
      "evidence_id": 9190,
      "data": {
        "name": "Amazon Web Services",
        "domain": "aws.amazon.com",
        "purposes": [
          "Provides secure cloud infrastructure used to host Soraban’s application, databases, and file storage. Customer data is stored and processed within AWS environments."
        ],
        "locations": [
          "Infrastructure & Cloud Hosting"
        ]
      }
    },
    {
      "kind": "subprocessor",
      "vendor": "anthropic",
      "evidence_id": 9190,
      "data": {
        "name": "Anthropic",
        "domain": "anthropic.com",
        "purposes": [
          "Provides large language models (Claude) via API for document classification and data extraction within Soraban's workflows. Customer data sent to Anthropic is governed by zero-data-retention terms, so it is not retained by Anthropic or used to train its models. Anthropic publishes model/system cards documenting model capabilities, limitations, safety evaluations, and known risks: [Anthropic model cards]("
        ],
        "locations": [
          "Engineering"
        ]
      }
    },
    {
      "kind": "subprocessor",
      "vendor": "cloudflare",
      "evidence_id": 9190,
      "data": {
        "name": "Cloudflare",
        "domain": "cloudflare.com",
        "purposes": [
          "Provides DNS hosting, content delivery network (CDN) services, and web application security protections (including DDoS mitigation and firewalls) to secure and accelerate access to Soraban systems."
        ],
        "locations": [
          "Network Security, DNS & Content Delivery"
        ]
      }
    },
    {
      "kind": "subprocessor",
      "vendor": "mailgun",
      "evidence_id": 9190,
      "data": {
        "name": "Mailgun",
        "domain": "mailgun.com",
        "purposes": [
          "Sends system-generated emails such as notifications, authentication passcodes, and document-related alerts."
        ],
        "locations": [
          "Email Delivery"
        ]
      }
    },
    {
      "kind": "subprocessor",
      "vendor": "openai",
      "evidence_id": 9190,
      "data": {
        "name": "OpenAI",
        "domain": "platform.openai.com",
        "purposes": [
          "Provides large language models via API for document classification and data extraction within Soraban's workflows. Customer data sent to OpenAI is governed by zero-data-retention terms, so it is not retained by OpenAI or used to train its models. OpenAI publishes system cards documenting model capabilities, limitations, safety evaluations, and known risks: [OpenAI system cards]("
        ],
        "locations": [
          "Engineering"
        ]
      }
    },
    {
      "kind": "subprocessor",
      "vendor": "stripe",
      "evidence_id": 9190,
      "data": {
        "name": "Stripe",
        "domain": "stripe.com",
        "purposes": [
          "Processes payments and provides identity verification services to support regulatory compliance and fraud prevention."
        ],
        "locations": [
          "Payments & Identity Verification"
        ]
      }
    },
    {
      "kind": "subprocessor",
      "vendor": "twilio",
      "evidence_id": 9190,
      "data": {
        "name": "Twilio",
        "domain": "twilio.com",
        "purposes": [
          "Delivers SMS-based messaging, including user notifications, and one-time passcodes used for multi-factor authentication and account security."
        ],
        "locations": [
          "SMS Messaging"
        ]
      }
    },
    {
      "kind": "subprocessor",
      "vendor": "vercel",
      "evidence_id": 9190,
      "data": {
        "name": "Vercel",
        "domain": "vercel.com",
        "purposes": [
          "Hosts and delivers portions of Soraban’s web application interface, ensuring fast and reliable access to user-facing components."
        ],
        "locations": [
          "Cloud Hosting"
        ]
      }
    },
    {
      "kind": "subprocessor",
      "vendor": "workos",
      "evidence_id": 5386,
      "data": {
        "name": "WorkOS",
        "purposes": [
          "Supports secure user authentication for all users accessing Soraban."
        ],
        "locations": [
          "Authentication & Identity Management"
        ]
      }
    }
  ]
}