The third-parties who process your data.
This page lists the third-party service providers (each, a "Subprocessor") engaged by Synaping Inc. ("Synaping Inc.") to process Personal Information on behalf of Synap customers. This list is maintained in accordance with Article 28 of the EU General Data Protection Regulation, the California Consumer Privacy Act as amended, and our Privacy Policy.
Synap Business customers may subscribe to email notifications of changes to this list by contacting legal@synap.ing. We will provide at least 30 days' advance notice of new Subprocessors processing Personal Information of Synap Business customers, except where a shorter period is required by law or to address an urgent security need.
Current Subprocessors
| Subprocessor | Function | Data Processed | Location |
|---|---|---|---|
| Cloudflare, Inc. | CDN, DDoS protection, SSL termination, bot management | IP addresses (anonymized before reaching our origin), browser metadata, request logs | Global edge network; US primary |
| Resend, Inc. | Transactional email delivery | Email addresses, message content for transactional emails (account notifications, security alerts, billing confirmations) | United States |
| Apple Inc. | App Store distribution, In-App Purchase processing, payment | Account email, payment information (Apple does not share card numbers with Synaping Inc.) | United States |
| Railway Corp. | Application hosting infrastructure for Synap Business | All Tenant Data for Synap Business customers, encrypted at rest and in transit | United States |
| GitHub, Inc. (Microsoft Corp.) | Source code hosting; no customer data processed | None (internal source code only) | United States |
AI Model Providers
The following providers may be engaged for AI model inference. Their engagement depends on the Service tier and customer configuration:
| Provider | Function | Applicable Tier | Data Handling |
|---|---|---|---|
| Anthropic, PBC | Claude AI model inference | Synap Business (when configured); Synap Mobile (with customer-supplied API key — direct device-to-Anthropic, not via Synaping Inc.) | Zero-retention API tier; contractually prohibited from training on inputs/outputs |
| OpenAI, LLC | GPT model inference | Synap Business (when configured); Synap Mobile (with customer-supplied API key — direct device-to-OpenAI, not via Synaping Inc.) | Zero-retention API tier; contractually prohibited from training on inputs/outputs |
For Synap Mobile users who configure their own AI provider API key, communications are direct between the device and the provider. Synaping Inc. does not intermediate, proxy, or have visibility into these communications.
Notification of Changes
This page is updated to reflect all changes to our Subprocessor list. For material changes — defined as the addition of a Subprocessor that will process a significant category of Personal Information, or a change in the type of Personal Information processed by an existing Subprocessor — we will additionally:
- Notify Synap Business customers via email at least 30 days in advance of the material change, unless a shorter period is necessary to address security or operational continuity
- Provide reasonable opportunity for Synap Business customers to object to the material change by writing to legal@synap.ing within the notice period
- If we cannot reasonably accommodate an objection to a material change, the objecting Synap Business customer may terminate its subscription for the affected Service without penalty
Routine substitution of a Subprocessor with another Subprocessor providing substantially equivalent services and protections is not a material change. Such substitutions are reflected on this page without separate email notice and do not trigger objection or termination rights.
Synap Enterprise
Synap Enterprise customers deploy on their own infrastructure. Synaping Inc. does not engage Subprocessors to process Synap Enterprise Tenant Data. Subprocessor disclosures for Enterprise deployments are limited to license validation, support-channel infrastructure, and aggregate billing telemetry.