Skip to main content
satooB

Subprocessors

Last updated: May 6, 2026Effective date: Upon acceptance

This page lists the third-party service providers (the "subprocessors") that Konatamo LLC ("satooB") engages to provide the satooB platform. It is published in the spirit of GDPR Article 28 and Article 30 transparency, and is reproduced as Annex 3 of our Data Processing Agreement.

1. Overview

We engage carefully selected third-party service providers to host, secure, monitor, and operate the Service. Each subprocessor is bound by a written agreement that mirrors the protections set out in our Data Processing Agreement and in our Privacy Policy. We rely on the providers' Standard Contractual Clauses (SCC) for transfers to non-adequate countries, and we apply supplementary measures (additional encryption, contractual restrictions on government access, audit rights) where our transfer impact assessments indicate they are necessary.

We provide at least thirty (30) days' advance notice before adding or replacing a subprocessor. Notifications go to the billing contact registered on each Merchant account ; you may also subscribe to updates by emailing privacy@satoob.com.

2. Authorised subprocessors

The list below is the canonical inventory of subprocessors. The links in the "Subprocessor" column point to the providers' own Data Processing Agreements or privacy notices.

SubprocessorServiceLocationDataDPA
Cloudflare, Inc.DNS, CDN, DDoS protectionGlobal · USA registeredIP, request metadataDPA + SCC
Google LLC (Google Workspace)Email infrastructure, document storageUSA + EU regionsEmail comms, identityDPA + SCC
Hostinger International, Ltd.VPS hosting for n8n workflow runnerEU (Lithuania)Workflow logsDPA
Mercury Bank (Choice Financial Group, member FDIC)Business banking and settlement payoutsUSASettlement payoutsBank-grade DPA
PostHog, Inc.Product analytics, error tracking, session diagnosticsEU (Frankfurt)Behavioural eventsDPA + SCC
Resend, Inc.Transactional email deliveryUSAEmail metadata + contentDPA + SCC
Stripe, Inc.Payment processingUSA + EU regionsPayment + identityDPA + SCC
Supabase, Inc.Database, authentication, object storageUSA · EU region for EU customersApplication dataDPA + SCC
Vercel, Inc.Hosting, edge runtime, CDNUSA + EU regionsApplication data + logsDPA + SCC

3. Out of scope of this list

Some categories of relationships are intentionally not included on this page :

  • Customer-side integrations — integrations that the Customer chooses to enable on its own (e-commerce platforms, CRMs, marketing automation, social-media tooling) are subprocessors of the Customer, not of satooB. Customers remain responsible for the data flows they trigger from their own integrations.
  • Operational service providers without access to personal data — providers that work for Konatamo LLC without ever processing personal data of platform users (corporate accounting, professional services, hosting of internal documents) are out of scope of GDPR Article 28 disclosure.
  • Marketing tools — we currently do not run targeted advertising and do not engage advertising-platform subprocessors. If we do in the future, the corresponding providers will be added to the list above with the standard 30-day advance notice.

4. Notifications and objections

We notify Merchants of additions to, or replacements of, this list by email to the billing contact registered on the Merchant account, at least thirty (30) days before the change takes effect. The change is also published here with the revised "Last updated" date.

You may object to a change on reasonable data-protection grounds by emailing privacy@satoob.com within the notice period. If we cannot resolve the objection by re-routing processing or by other reasonable means, you may terminate the affected portion of the Service for cause as set out in Section 10 of the DPA.

5. Contact

For questions about this list :

Postal address (for legal service of process) : Konatamo LLC, 1209 Mountain Road Pl NE, Ste R, Albuquerque, NM 87110, USA.