Trust

Sub-processors

The companies Saible uses to process personal data for its customers and for itself, what each does, and where. Last updated 13 October 2026. We change this page before a new sub-processor starts.

Sub-processorWhat it does for SaibleWhere
Amazon Web ServicesRuns the whole Saible platform: the console and control plane (ECS Fargate), the database (Aurora PostgreSQL) and its backups, storage including sealed evidence (S3), encryption keys (KMS), secrets (Secrets Manager), sign-in and multi-factor authentication (Cognito), outbound email (SES) and service logs (CloudWatch).In the organisation's region: the United States (Ohio, us-east-2) or the EU (Stockholm, eu-north-1). AWS's own record of activity in Saible's AWS accounts (CloudTrail: who called which AWS service, from which address; no record content) is kept in the United States for both regions.
Amazon Web Services: Amazon BedrockThe AI models behind Saible's own features, such as the assistant. Calls go through the geography's cross-region inference profile and never a global one.EU organisations: an eu.* profile, which may process in eu-central-1, eu-north-1, eu-south-1, eu-south-2, eu-west-1 and eu-west-3 (the model in use today, Amazon Nova Lite, only in eu-central-1, eu-north-1, eu-west-1 and eu-west-3). US organisations: a us.* profile, which processes in us-east-1, us-east-2 and us-west-2.
Google (Google Workspace)Saible's email: requests for access arrive there, and support and contract correspondence is held there.Google's data centres; Saible has not pinned a data region.

Not Saible's sub-processors

  • The AI providers your gateway forwards to. The gateway runs in your network and calls your providers with your keys; those providers are yours.
  • Your own storage and data sources: a Snowflake account connected as a spend source, which Saible reads with your credentials and writes nothing to, and an S3 bucket you set up for your prompts or your evaluation corpus, which stays yours under your key.

How Saible itself handles personal data: privacy notice.