Privacy & Data

Sub-processor List

Last updated August 30, 2026


01   About This List

This page lists the third parties Souvenir, Inc. engages to process personal information on behalf of our customers (our “sub-processors”), together with what each one does and where it processes data. It supplements our Privacy Policy and our Connected Services Privacy Policy, and is the list referenced by our data processing commitments.

Every sub-processor listed here is engaged under a written contract requiring it to process data only on our documented instructions, to protect it with appropriate technical and organizational measures, and to support our obligations to you.

02   Infrastructure and Platform

Sub-processorPurposeLocation
Amazon Web Services, Inc.Primary cloud infrastructure — compute, PostgreSQL databases, S3 file storage, Redis caching, secrets management, Textract document OCR, and Bedrock vector embeddings (Cohere models)United States (us-east-1)
Vercel Inc.Hosting and content delivery for the Souvenir web application and marketing siteUnited States
Okta, Inc. (Auth0)User authentication, login, and session managementUnited States
E2BIsolated sandbox containers that execute code and generate files on a user’s requestUnited States

03   AI Model Providers

Inputs are transmitted to the providers below to generate a response. Requests are routed through OpenRouter, which selects and calls the appropriate provider. We do not use Customer Data to train any model, and we rely on each provider’s API terms, under which API inputs and outputs are not used to train their foundation models.

Sub-processorPurposeLocation
OpenRouter, Inc.AI model routing — transmits Inputs to the selected model provider and returns the responseUnited States
OpenAI, L.L.C.AI model inference, including speech-to-text transcriptionUnited States
Anthropic PBCAI model inferenceUnited States
Google LLCAI model inference (Gemini models)United States
xAI Corp.AI model inference (Grok models)United States
Mistral AI SASAI model inference and document OCRFrance

04   Connectors and Integrations

Sub-processorPurposeLocation
Pipedream, Inc.Connector authentication and API brokering — holds connected-account credentials in its vault and relays requests to the connected serviceUnited States
Jina AI GmbHRetrieval and search of public web pages when an assistant looks up information from the internetGermany
Slack Technologies, LLCPlatform for the Souvenir Slack appUnited States
Meta Platforms, Inc.Meta Ads API, for customers who connect a Meta Ads accountUnited States

Connectors are optional. A provider in this section processes your data only if you choose to enable the corresponding connector or install the Slack app.

05   Business Operations

Sub-processorPurposeLocation
Stripe, Inc.Payment processing, subscriptions, and billingUnited States
Functional Software, Inc. (Sentry)Application error monitoring and diagnosticsUnited States
Mixpanel, Inc.Product analytics within the Souvenir applicationUnited States
Google LLC (Google Analytics)Website analytics for getsouvenir.comUnited States

06   Changes to This List

We may add or replace sub-processors as the Service evolves. When we do, we will update this page and revise the “Last updated” date above.

To be notified in advance of changes to this list, email contact@getsouvenir.com and ask to be added to our sub-processor change notifications. Customers with a data processing agreement in place receive notice in accordance with that agreement.

07   Contact

Questions about this list, or requests for notification of changes: contact@getsouvenir.com — Souvenir, Inc. 211 28th Street, Des Moines, Iowa, USA.