The third-party providers Sorvyn uses to deliver the service, what each one does, and where your data sits. We keep this page current and notify customers before adding a new sub-processor.
Sorvyn is operated by MR.MEDIA S.A.R.L-S (RCS Luxembourg: B291701), trading as Sorvyn, established in Luxembourg. To run the service we rely on the carefully selected sub-processors below. Each is bound by a data processing agreement, processes data only on our instructions, and applies its own security controls.
We have split them into two groups so it is clear what touches your business data (the documents and content you put into Sorvyn, such as invoices) versus what only touches your account data (your billing and login details).
| Sub-processor | What it does | Location | Transfer safeguard |
|---|---|---|---|
| Anthropic (Claude) | Reads and structures the documents and text your automations process. Does not train on your data; deletes within 30 days of termination. | USA | SCCs |
| Supabase | Database that stores your account, configurations, and automation records. | EU (Ireland) | EU-hosted |
| Google Workspace | Gmail, Calendar, and Drive access, only for the automations you activate (file pickup, drafts, exports). | EU / global | SCCs |
| OpenAI (Whisper) | Transcribes audio and video for Sorvyn Notes and Sorvyn Social only. Not used by Sorvyn Books. | USA (EU entity) | SCCs |
| n8n | Runs the automation workflows. Self-hosted by Sorvyn on our own EU infrastructure, so no third party operates it. | EU (self-hosted) | EU-hosted |
| Sub-processor | What it does | Location | Transfer safeguard |
|---|---|---|---|
| Supabase | Stores your account and authentication data. | EU (Ireland) | EU-hosted |
| Stripe | Processes your subscription payments. Sorvyn never sees or stores your card number. | USA / Ireland | SCCs |
| Loops | Sends account and lifecycle emails (welcome, trial reminders) to your address. | USA | SCCs |
| Vercel | Hosts and serves the Sorvyn web app. Logs IP and browser type for security. | USA / EU edge | SCCs |
| PostHog & Microsoft Clarity | Product and website analytics on the marketing site to understand usage. | EU / USA | SCCs |
Your data is hosted in the EU wherever the provider allows it (Supabase, our self-hosted n8n). Where a provider is established in the United States, transfers are covered by the European Commission's Standard Contractual Clauses (SCCs), included in each provider's data processing agreement, together with the technical safeguards described in our Security and Data Protection overview.
For accounting and other business customers: when you use Sorvyn to process your own clients' data, Sorvyn acts as your processor under a separate Data Processing Agreement, and the providers in Group A act as our sub-processors. Ask us for the DPA at patrick@sorvyn.ai.
We update this page when we add or replace a sub-processor and notify active customers in advance. If you have a concern about a new sub-processor, contact us at patrick@sorvyn.ai and we will work with you in good faith to resolve it.