{"updated_at":"2026-10-26T05:26:55+00:00","subprocessors":[{"name":"Amazon Web Services","service_description":"Cloud hosting (future)","data_processed":"application data at rest","region":"us-east-1","dpa_url":null,"updated_at":"2026-06-29 04:18:31.921611+00"},{"name":"Google Analytics 4","service_description":"Optional marketing analytics on public Sommetry pages after cookie consent","data_processed":"Online identifiers, page views, referrers\/UTM sources, coarse device\/geo signals (IP anonymization enabled in gtag config)","region":"global","dpa_url":null,"updated_at":"2026-07-23 05:45:47.075714+00"},{"name":"OpenAI (Cellara voice)","service_description":"Optional speech-to-text and text-to-speech for Cellara when AI_STT_ENABLED \/ AI_TTS_ENABLED are on","data_processed":"Short audio clips for transcription; reply text for speech synthesis (not retained by Sommetry after the request)","region":"us-east-1","dpa_url":null,"updated_at":"2026-07-23 05:45:46.860467+00"},{"name":"Stripe","service_description":"Payment processing","data_processed":"billing contact, subscription metadata","region":"us-east-1","dpa_url":null,"updated_at":"2026-06-29 04:18:31.921611+00"}],"policy_note":"Sommetry maintains this list for GDPR Art. 28 transparency. Business customers receive DPA terms at signup."}