SaneCiteSecurity

Data Processing Addendum

Last updated 6 July 2026 · SaneCite is a product of SaneApps.

For customers that need a signed DPA, SaneCite provides one during Enterprise onboarding. Until then, this page records the public processing commitments reviewers usually need.

Roles

SaneApps is the processor for customer questionnaire data. The customer remains controller of uploaded documents, questionnaires, generated answers, and exports.

Processing purpose

Customer data is processed only to provide SaneCite: parsing uploaded files, retrieving relevant excerpts, drafting evidence-backed answers, review/export, account administration, security, billing, and support.

AI processing

Documents are not used to train models. The model sees only bounded excerpts selected for the specific question being answered, and SaneCite verifies supported answers against those excerpts.

Subprocessors

The current subprocessors are Cloudflare, Resend, Lemon Squeezy (Pro), and Stripe (Enterprise). See the live subprocessor list.

Deletion and export

Customers can export their answers and delete account data. Enterprise customers can configure retention and request a signed DPA by emailing hi@saneapps.com.

Security · Security Q&A · Subprocessors · Status · Privacy