Last Updated: March 2026
Subprocessors
Cultara uses a limited number of trusted third-party service providers ("Subprocessors") to operate, secure, and support the platform. These providers may process customer data solely for the purpose of delivering services on behalf of Cultara.
Cultara evaluates subprocessors based on security, privacy, reliability, and operational requirements. Where applicable, contractual safeguards are implemented to protect customer data.
Cultara prioritizes Canadian hosting and processing where commercially and technically feasible. Where Canadian options are not available or appropriate, services may be provided from the United States.
Current Subprocessors
| Provider | Purpose | Primary Processing Region | Data Categories |
|---|---|---|---|
| DigitalOcean | Cloud infrastructure, hosting, storage, databases, and platform operations. | Canada (default) | Customer platform data and system data. |
| OpenAI | Embeddings, large language model processing, and AI-powered insights. | United States | Anonymized customer content and analytical context. |
| Anthropic (Claude) | Large language model processing and AI-powered insights. | United States | Anonymized customer content and analytical context. |
| Postmark | Transactional email delivery. | Canada | User email addresses and email metadata. |
| Sentry | Application monitoring, diagnostics, and error reporting. | United States | Operational logs and diagnostic information. |
| Cloudflare | CAPTCHA, bot protection, and website security. | United States | Website traffic metadata and security-related information. |
Cultara prioritizes Canadian hosting and processing where commercially and technically feasible. Certain specialized infrastructure, security, and AI providers currently operate primarily from the United States. Customer-specific regional hosting arrangements may be available upon request.
Subprocessor Management
Cultara may add, remove, or replace subprocessors from time to time as operational, security, legal, or business requirements evolve. New subprocessors are evaluated based on security controls, privacy practices, operational reliability, and compliance obligations before being engaged.
Where required by applicable law or contractual obligations, Cultara maintains appropriate agreements with subprocessors governing the handling, processing, protection, and confidentiality of customer data.
Contact
Questions regarding subprocessors or data processing practices may be directed to:
Email: connect@cultara.ai