SaneCiteSign in

DPA & subprocessors

Last updated 30 June 2026 · SaneCite is a product of SaneApps.

Processor terms

For customer content you upload to SaneCite, you are the controller and SaneCite acts as a processor/service provider. We process that data only to provide SaneCite, support the account, secure the service, and comply with law.

Data handling commitments

Customer documents and answers are single-tenant at the application layer, encrypted in transit and at rest on Cloudflare, never sold, and never used to train models. You can export or delete account data from the product.

Deletion and return

Account deletion removes uploaded documents, extracted evidence, questionnaires, answers, answer library records, account email rows, and active SaneCite session tokens, then returns a deletion receipt.

International transfers

SaneCite runs on Cloudflare's global network. If you need EU/UK SCCs, a signed DPA, data-residency terms, or a private deployment, email hi@saneapps.com before uploading regulated production data.

Current subprocessors

ProviderPurposeData involved
CloudflareHosting, Workers, Containers, D1, R2, KV, Queues, Workers AIApplication data, uploaded documents, generated answers, auth/session data
ResendTransactional emailEmail address and sign-in/support email content
LemonSqueezyBilling merchant of recordBilling/customer checkout data for paid plans

Subprocessor changes

We notify customers before adding a material new subprocessor. The current list is always available at this page.

Security review

Security summary, self-answered questionnaire, privacy policy, terms, and live status are linked below. For a signed DPA packet, email hi@saneapps.com.

Security · Security Q&A · Privacy · Terms · Status