Subprocessors

Suwali relies on a number of third-party service providers ("subprocessors") that we engage to process personal data on behalf of organizations using Suwali, in accordance with Article 28 of Regulation (EU) 2016/679 (GDPR). Each subprocessor is contractually bound to process personal data in accordance with written instructions, to ensure appropriate technical and organisational security measures, and compliance with applicable data protection laws. Access to personal data is limited to what is necessary for the performance of the services described below.

Amazon Web Services (AWS)

Nature and purpose of processing: Cloud infrastructure and hosting services, including the use of Amazon Bedrock for AI-powered summarization.

Meta Platforms, Inc. (WhatsApp Business API)

Nature and purpose of processing: Messaging service provider enabling communication with end users via WhatsApp, only when the WhatsApp integration is enabled.

Telegram Messenger LLP (Telegram API)

Nature and purpose of processing: Messaging service provider enabling communication with end users via Telegram, only when the Telegram integration is enabled.

Google Cloud Platform (Google APIs)

Nature and purpose of processing: Limited access to Google Drive data solely for the purpose of processing folders and files explicitly shared with the application, if any.

OpenAI

Nature and purpose of processing: AI service provider used for content extraction and question-answering functionality based on data submitted by the application.

Sentry

Nature and purpose of processing: Error-tracking services used to record technical issues.

Cloudflare, Inc.

Nature and purpose of processing: Network security, content delivery, and traffic routing services used to protect and optimize application traffic.

Neo4j Aura

Nature and purpose of processing: Managed graph database hosting used to store structured application data.