Sub-Processors

Last updated: August 13, 2026

Romulus, Inc. uses the following third-party sub-processors to deliver the Sevrel platform. Contract, DPA, processing-location, and assurance evidence vary by vendor and are reviewed separately; this page is not proof that every listed vendor has an executed Sevrel-specific DPA or current audit report.

Sub-Processor	Purpose	Location
Railway Corp.	Backend application hosting and managed PostgreSQL + Redis hosting. All at-rest customer data lives here.	United States
Cloudflare, Inc.	Frontend hosting (Cloudflare Pages), CDN, and DDoS protection. Frontend static bundle and HTTP request metadata.	Global
Sentry (Functional Software, Inc.)	Backend error tracking and performance monitoring. Secrets scrubbed before transmission.	United States
Anthropic, PBC	Claude API (Haiku / Sonnet / Opus) for chat, RAG answers, document analysis, and text/vision extraction of email attachment content. No training on API data by default; API request data is retained up to 30 days for abuse monitoring (Zero Data Retention not yet in place).	United States
MongoDB, Inc. / Voyage AI	Voyage 4 embeddings and rerank-2.5-lite for semantic retrieval. Access is limited to Sevrel-entitled organizations, including organizations enabled through the legacy deployment allowlist. An operator observed the production account dashboard retention setting as Opted Out on July 26, 2026. That dated observation is not proof of an executed DPA, current processing location, or independent assurance coverage.	Not independently verified
Microsoft Corporation	Entra ID identity provider, and email + calendar access on the user's behalf via Microsoft Graph (OBO flow).	United States
Google (OAuth)	Google sign-in (OAuth 2.0) for user authentication.	United States
Egnyte, Inc.	Customer document repository accessed via Egnyte MCP for RAG and citation.	United States
Stripe, Inc.	Billing and subscription management. Card data is collected directly by Stripe and never transits Sevrel.	United States
Resend	Transactional email delivery (account notifications, invitations).	United States
Google Drive	Cloud storage integration — conditional, activated per-org only if you connect Google Drive as a document source.	United States

We will update this page when sub-processors are added or removed. If you have questions about our sub-processors, contact us at [email protected].

For full details on how we handle your data, see our Privacy Policy.