# Sana

Sana (sanalabs.com): subprocessors, data processing agreement, security documents and changes, as monitored by Third Party Index.

- Page: https://thirdpartyindex.com/vendors/sana
- Documents last verified: 2026-09-30
- Transparency rating: 83/100 (how much it publishes, not how secure it is)
- Cite as: Sana, Third Party Index, https://thirdpartyindex.com/vendors/sana (data CC BY 4.0)

## Documents

| Document | URL | Last verified | Last changed |
|---|---|---|---|
| Trust center | https://trust.sanalabs.com/ | 2026-09-30 | 2026-09-30 |
| Subprocessor list | https://sanalabs.com/download/legal/subprocessors.pdf | 2026-09-30 | 2026-09-30 |
| Data processing addendum | https://sanalabs.com/download/legal/data-processing-addendum.pdf | 2026-09-30 | 2026-09-30 |
| Privacy policy | https://sanalabs.com/legal/privacy-notice | 2026-09-30 | 2026-09-30 |
| Terms | https://sanalabs.com/download/legal/agents-product-terms.pdf | 2026-09-30 | 2026-09-30 |
| Security page | https://sanalabs.com/products/sana/security | 2026-09-30 | 2026-09-30 |
| Status page | https://status.sanalabs.com/ | 2026-09-30 | 2026-09-30 |

## Subprocessors (72)

As its own list states them.

| Subprocessor | Purpose | Location | Listed since |
|---|---|---|---|
| 10969 Berlin | search and content | Processing Country: USA; Processing Location: USA (default) | 2026-09-30 |
| 2484, Elevenlabs New York, NY | Content generation 10016 (Text to speech) | Processing Country: USA Belgium; Processing Location: USA EEA/EU | 2026-09-30 |
| 303 2nd St., North | processor. Cloud | — | 2026-09-30 |
| 410 Terry Ave N, Amazon Web WA. 98109 Seattle, Services USA | services / infrastructure for core products | Processing Country: USA; Processing Location: USA | 2026-09-30 |
| #4339, San | Meeting transcriptions | Processing Country: SCC incl.; Processing Location: EEA/EU Germany | 2026-09-30 |
| 50825 Cologne | — | Processing Country: Finland | 2026-09-30 |
| 620 8th Ave 45th | services / | — | 2026-09-30 |
| 69 Madison Ave | — | — | 2026-09-30 |
| 94104, United | Search and model | — | 2026-09-30 |
| Ably EC2A 3EJ | Real-time messaging | Processing Country: Ireland; Processing Location: EEA/EU | 2026-09-30 |
| Ably Realtime Ltd. Fora 21-33 Great | — | — | 2026-09-30 |
| Agora, Inc., 2804 | — | — | 2026-09-30 |
| Amazon Web | Pipedream connector | — | 2026-09-30 |
| Anthropic PBC, 548 Market Street, PMB 90375, San | — | — | 2026-09-30 |
| Anthropic States | infra Transactional mailing | Processing Country: USA; Processing Location: USA | 2026-09-30 |
| Ave 7493, 19904 | — | — | 2026-09-30 |
| Barrow Street | prevention and related | Processing Country: US Regional; Processing Location: USA (option for | 2026-09-30 |
| Blvd., Santa Clara, Agora, Inc. CA 95054, USA | Audio video streaming | Processing Country: USA; Processing Location: USA | 2026-09-30 |
| Brevo - Sendinblue Paris, France Sana Sub-processors Last updated: 9 September 2026 | invites etc.) | Processing Country: Belgium; Processing Location: EEA/EU | 2026-09-30 |
| Cesson-Sévigné, Gladia France Sana Sub-processors Last updated: 9 September 2026 | Recordings / Audio Transcription API Hosting infra Search Infra / Content generation Internet Security Services (web | Processing Country: France; Processing Location: EEA/EU | 2026-09-30 |
| Cloudinary Ltd., of 20 Aharon Bart St., Petah Tikva, Cloudinary 4951448, Israel | Content hosting Pipedream connector | Processing Country: USA­ Ireland Germany; Processing Location: USA­(default) EEA/EU | 2026-09-30 |
| Court, 18-21 St., Intercom Dublin 2, Ireland Jina AI GmbH | Support, Interaction data Web content extraction and search via Reader API. URLs are submitted for content parsing and markdown conversion. | Processing Country: Ireland; Processing Location: EEA/EU | 2026-09-30 |
| [Datadog, Inc.](https://thirdpartyindex.com/vendors/datadog.md) | processor. Cloud | — | 2026-09-30 |
| [DeepL SE](https://thirdpartyindex.com/vendors/deepl.md) | — | — | 2026-09-30 |
| DeepL Germany | Content translations | Processing Country: Sweden; Processing Location: EEA/EU | 2026-09-30 |
| Doral, D-ID FL 33166 Eleven Labs Inc | Video avatar generation | Processing Country: Sweden; Processing Location: EEA/EU | 2026-09-30 |
| Dover, Delaware, Hatchet USA Intercom R&D | Task infrastructure | Processing Country: Ireland; Processing Location: EEA/EU | 2026-09-30 |
| Dublin 18, D18 P521, Microsoft Azure Ireland | Search infra / Cloud Services | Processing Country: at; Processing Location: EEA/EU | 2026-09-30 |
| Eastern Street | — | — | 2026-09-30 |
| Floor 21, Francisco, CA 94111 | San Third party | — | 2026-09-30 |
| Floor, NY 10018 New York, Datadog USA | infrastructure for core products. Monitoring / logging | Processing Country: USA; Processing Location: USA | 2026-09-30 |
| Francisco, CA | — | — | 2026-09-30 |
| Francisco, California, 94105, US | Transactional mailing (Default email provider used for | Processing Country: SCC incl. Addendum | 2026-09-30 |
| Francisco, USA | products. Exception /; products. Primary | Processing Country: SCC incl.; Processing Country: UK Ext. | 2026-09-30 |
| Functional | — | — | 2026-09-30 |
| Gladia, 38 rue de la Tremblaie 35510 | — | — | 2026-09-30 |
| Google Cloud (GCP) Dublin 4 Ireland | security services) | Processing Country: at rest; Processing Location: customers) | 2026-09-30 |
| Google Ireland | Ltd., application firewall | — | 2026-09-30 |
| Gordon House | DDoS attack | Processing Location: EEA/EU (default) | 2026-09-30 |
| Hatchet Technologies, Inc. 1111b S Governors | — | — | 2026-09-30 |
| Haussmann 75008 | sending notifications | Processing Country: France | 2026-09-30 |
| Jina Germany | retrieval | Processing Country: Belgium; Processing Location: EEA/EU | 2026-09-30 |
| London, UK | — | — | 2026-09-30 |
| Maarweg 165 | — | — | 2026-09-30 |
| Market Street | — | Processing Location: USA USA | 2026-09-30 |
| Merge API, Inc., 353 | — | — | 2026-09-30 |
| Merge Sana Sub-processors Last updated: 9 September 2026 | integrations provider | Processing Country: USA; Processing Location: USA | 2026-09-30 |
| Microsoft Ireland | — | — | 2026-09-30 |
| Mission College | — | — | 2026-09-30 |
| Mistral AI, 15 rue des Halles, Mistral 75001 Paris | Search Infra / Content France generation | Processing Country: Sweden; Processing Location: EEA/EU | 2026-09-30 |
| Modal Inc, 222 Broadway, 10038 New York, Modal USA | Sandboxed code execution | Processing Country: Sweden Worldwide OR; Processing Location: EEA/EU Worldwide routing OR | 2026-09-30 |
| OpenAI Ireland Ltd., 117-126 Sheriff | — | Processing Country: EEA/EU; Processing Location: EEA/EU & | 2026-09-30 |
| OpenAI Ireland Sana Sub-processors Last updated: 9 September 2026 | generation | Processing Country: only; Processing Location: only customers) | 2026-09-30 |
| Operations, Ltd. | — | — | 2026-09-30 |
| Prinsensgate 49, 7011 Trondheim, Vespa.ai Norway Sana Sub-processors Last updated: 9 September 2026 | Search database | Processing Country: SCC incl. Addendum; Processing Location: EEA/EU Germany | 2026-09-30 |
| Prinzessinnenstraß e 19-20 | User search queries are submitted for web | — | 2026-09-30 |
| Recall Francisco, CA | and recordings | Processing Country: Addendum; Processing Location: Japan Japan | 2026-09-30 |
| [Redis, Inc.](https://thirdpartyindex.com/vendors/redis.md) | Pipedream connector | — | 2026-09-30 |
| Redis Labs Hyperdoc Inc., 2261 | data store | Processing Country: Swiss; Processing Location: USA USA | 2026-09-30 |
| Sacramento | St. | — | 2026-09-30 |
| [SendGrid (Twilio)](https://thirdpartyindex.com/vendors/sendgrid.md) | sending notifications) Direct processor: Error alerting, logs, and trace information. | Processing Country: EU-US DPF; Processing Location: EEA/EU Ireland | 2026-09-30 |
| Sendinblue, 06 boulevard | (Default email provider used for | — | 2026-09-30 |
| [Sentry](https://thirdpartyindex.com/vendors/sentry.md) | error monitoring | Processing Country: Swiss-U.S.; Processing Location: EEA/EU Germany | 2026-09-30 |
| Services, Inc. | processor. Cloud | — | 2026-09-30 |
| Simpleshow USA Corp. 8200 NW 41st | — | — | 2026-09-30 |
| Software, Inc. dba Sentry, 45 Fremont St 8th fl, CA 94105 San | Pipedream connector processor: Cloud services / infrastructure for core | Processing Country: SCC incl. Swiss EU-U.S. | 2026-09-30 |
| Street, Ste 200 | — | — | 2026-09-30 |
| Street Upper, Dublin 1, D01 | YC43, Search infra / Content | Processing Country: EU; Processing Location: Switzerland (option only for | 2026-09-30 |
| Tower Suite 525, CA 94107 San | services / infrastructure for core | — | 2026-09-30 |
| Twilio Inc. 101 Spear Street, Fifth Floor, San | — | — | 2026-09-30 |
| Unltd. Co, Stephen | — | — | 2026-09-30 |
| VESPA.AI NORWAY AS | — | — | 2026-09-30 |

Read from ([evidence](https://thirdpartyindex.com/evidence/25318)). CSV: https://thirdpartyindex.com/vendors/sana/subprocessors.csv

## Compliance

As its trust center lists them.

- Audited: SOC 2 Type II, SOC 2 Type I, ISO/IEC 27001 ([evidence](https://thirdpartyindex.com/evidence/25598))
- Claimed: GDPR ([evidence](https://thirdpartyindex.com/evidence/25598))

## Listed as a subprocessor by (0)

No tracked vendor lists it.

## Service status

Incidents it reported on its own status page.

- Last 90 days: 0 reported incidents (0 major or critical, 0 minor, 0 with no impact stated)
- 2026-06-16: Sana Learn Degraded Performance (EU region) (minor)
- 2026-06-01: Sana Learn availability (EU region) (minor)
- 2026-05-28: sana.ai domain outage (minor)
- 2026-05-22: sana.ai domain outage (major)

---

Third Party Index (https://thirdpartyindex.com) monitors vendors' public security and privacy documents and keeps each version as evidence. Data CC BY 4.0 (https://creativecommons.org/licenses/by/4.0/); vendors' own documents are theirs. API: https://thirdpartyindex.com/api