Subprocessors
Last updated: August 16, 2026
SanCai engages the following third-party services to deliver the platform. Each may process limited customer or end-user data strictly as needed for its stated purpose. We review this list when vendors change; material additions are announced to customers with at least 14 days' notice, during which you may object per our Data Processing Agreement.
| Vendor | Purpose | Location |
|---|---|---|
| Supabase | Database, authentication, file storage | United States |
| Vercel | Dashboard and webhook hosting | United States |
| Fly.io | Background worker hosting | United States |
| Cloudflare | CDN and marketing site hosting | United States |
| Stripe | Payment processing | United States |
| Resend | Transactional and lifecycle email | United States |
| Moonshot AI (Kimi) | LLM inference for content and analysis agents | China |
| DeepSeek | LLM inference (optional provider) | China |
| OpenAI | Embeddings for brand memory | United States |
| ElevenLabs | Voiceover synthesis | United States |
| Higgsfield AI | Image and video generation | United States |
| Grafana Labs | Telemetry storage and dashboards | United States |
| Meta Platforms | Instagram/Facebook publishing and ads APIs | United States |
| TikTok | Content publishing API | United States |
| Google (YouTube) | Shorts publishing API | United States |
| Telegram | Approval notifications | Netherlands / UAE |
Social platform APIs (Meta, TikTok, Google) receive content only when you approve its publication. LLM providers receive prompts and brand context needed to generate content; they are not used to train models under our API agreements. Questions: privacy@sancai.ai.