Sub-processors
A sub-processor is a third party that may process personal data on Sunra's behalf to deliver the Service. Sunra is an AI creation platform that aggregates many AI models, so the model you choose determines which provider receives your prompt and any media you submit. The list below reflects our current integrations. The authoritative, dated copy is maintained by Sunra and shared with enterprise customers on request.
AI model providers
Prompts and any media you submit for a generation are sent to the provider that runs the selected model. We are securing written no-training / no-retention commitments from these providers (in progress).
| Service | Provider | Purpose | Data processed | Region |
|---|---|---|---|---|
| OpenAI | OpenAI, L.L.C. (USA) | Image and video generation (e.g. GPT Image, Sora) | Prompts, uploaded reference media | United States |
| Google LLC (USA) | Image and video generation (e.g. Veo, Gemini image) | Prompts, uploaded reference media | United States / global Google Cloud | |
| ByteDance (Seedance) | ByteDance Ltd. | Video generation (e.g. Seedance) | Prompts, uploaded reference media | Provider-operated infrastructure |
| Kuaishou (Kling) | Kuaishou Technology | Video generation (Kling models) | Prompts, uploaded reference media | Provider-operated infrastructure |
| fal.ai | Features and Labels, Inc. (USA) | Model hosting / gateway for many image & video models, plus vision-language analysis | Prompts, uploaded reference media | United States |
| Replicate | Replicate, Inc. (USA) | Model hosting for selected models | Prompts, uploaded reference media | United States |
Language model providers for the AI assistant
When you chat with Sunra's AI assistant, your messages and the project context it needs are sent through Sunra's model gateway (api-llm.sunra.ai) to the provider of the language model in use, only to produce the reply. We are securing written commitments from these providers not to train on your content and to limit how long they keep it.
| Service | Provider | Purpose | Data processed | Region |
|---|---|---|---|---|
| OpenAI | OpenAI, L.L.C. (USA) | Language models (GPT) | Chat messages, project context | United States |
| Anthropic | Anthropic, PBC (USA) | Language models (Claude) | Chat messages, project context | United States |
| Amazon Web Services | Amazon Web Services, Inc. (USA) | Anthropic's Claude models, run on AWS | Chat messages, project context | Global (AWS cross-region inference) |
| Google LLC (USA) | Language models (Gemini) | Chat messages, project context | United States / global Google Cloud | |
| DeepSeek | DeepSeek (China) | Language models (DeepSeek), through DeepSeek's own API | Chat messages, project context | China (mainland) |
| OpenRouter | OpenRouter, Inc. (USA) | Backup route for the DeepSeek models | Chat messages, project context | United States |
| Moonshot AI (Kimi) | Moonshot AI | Language models (Kimi), through Moonshot AI's international API | Chat messages, project context | As set by Moonshot AI's terms |
| Alibaba Cloud Model Studio (Qwen) | Alibaba Cloud | Language models (Qwen), through the international endpoint | Chat messages, project context | Singapore |
| MiniMax | MiniMax | Language models (MiniMax), through MiniMax's international API | Chat messages, project context | As set by MiniMax's terms |
Infrastructure & storage
| Service | Provider | Purpose | Data processed | Region |
|---|---|---|---|---|
| Alibaba Cloud | Alibaba Cloud | Storage and delivery of generated and uploaded media (OSS); hosting of Sunra's backend and its database (ACK) | Generated media, uploaded media; account, billing and usage data | Singapore |
| Vercel | Vercel, Inc. (USA) | Application hosting, CDN, web analytics | IP address, request/usage telemetry | United States / global edge |
| Cloudflare | Cloudflare, Inc. (USA) | Proxy, CDN and security for Sunra's backend; Turnstile bot protection on sign-in; Workers AI for drafting support replies | IP address, request metadata, browser signals for verification; support emails | Global edge |
Account, payments & communications
| Service | Provider | Purpose | Data processed | Region |
|---|---|---|---|---|
| Stripe | Stripe, Inc. (USA) | Payment processing and subscription billing | Billing details, payment method (held by Stripe) | United States |
| Google Sign-In | Google LLC (USA) | Optional authentication (Google / One Tap) | Email, name, profile photo (with your consent) | United States |
| Google Workspace | Google LLC (USA) | Emails you send us and our replies | United States / global | |
| Resend | Plus Five Five, Inc. (USA) | Transactional and marketing email | Email address, name, the emails we send you | United States (sent through Amazon SES, US East) |
Analytics & advertising measurement
These measure how people find and use Sunra, and how our ads perform. When they run, and how to turn them off, is set out in the cookie section of our Privacy Policy.
| Service | Provider | Purpose | Data processed | Region |
|---|---|---|---|---|
| Ahrefs Web Analytics | Ahrefs Pte. Ltd. (Singapore) | Web analytics | Pages visited, referrer, browser and device information, IP address | Provider-operated infrastructure |
| Meta Pixel | Meta Platforms, Inc. (USA) | Advertising measurement, including sign-up and purchase events | Cookie identifiers, IP address, browser information, pages visited, sign-ups and purchases | United States |
| Pinterest tag | Pinterest, Inc. (USA) | Advertising measurement, including sign-up and purchase events | Cookie identifiers, IP address, browser information, pages visited, sign-ups and purchases | United States |
How we limit what providers receive
Data sent to any model provider is limited to your prompt and any media you submit for that generation. We are obtaining written no-training / no-retention commitments from providers, and customers who require it will be able to use a restricted set of models under our forthcoming compliance mode.
Questions
For the full sub-processor list, data-flow details, or to request our DPA, contact legal@sunra.ai.