Legal

Sub-processor List

The third-party services SovereignEG uses to operate the platform — who they are, what they process, and where they are located.

Effective date: 1 June 2026

Last updated: 23 October 2026


SovereignEG uses the following third-party services to operate the Service. Changes to this list are communicated to customers at least 30 days before the new sub-processor begins processing data.

Sub-processorPurposeData processedLocation
Cloud infrastructure providerApplication hosting (compute, storage, networking)Account data, usage metadata, billing recordsEgypt
Managed PostgreSQL (TimescaleDB)Primary databaseAccount data, usage metadata, billingEgypt
Managed RedisCaching, rate limiting, session speed layerSession cache, rate-limit countersEgypt
KashierCard and mobile-wallet payment processing for prepaid credit top-upsCard or mobile-wallet details you enter on Kashier's hosted payment page, the amount and currency, our payment reference and an ID identifying your organizationEgypt
Amazon Web Services (S3)Nightly off-site backupsAccount records, usage statistics and model usage metadataGermany (Frankfurt)
AkedlyDelivering phone-verification codes by WhatsApp (through Meta's WhatsApp service) or SMSYour phone number, the one-time code and your IP addressEgypt
Google"Sign in with Google" on our login and sign-up pagesIf you sign in with Google: your Google account ID, name, email address and profile photoUnited States
Google Analytics (Google LLC)Traffic analytics for our public website pages (never the signed-in console)Addresses of pages viewed and the referring page (without query strings, apart from campaign tags), page titles, interactions such as scrolling and clicks on links to other sites, IP address (used for approximate location), device and browser details, analytics cookie identifiersUnited States
ResendSending the emails our Service sends automatically: account and security emails, team invites, payment receipts with your invoice, credit-expiry reminders, Student-plan verification codes, account notices and product announcements; and the notice our team receives when you send a contact or feedback formEmail address, name, organization name and the content of those emails, including what you wrote in a formUnited States
Upstream model providersAI inference (when a model is backed by a third-party provider)Request payload required to generate the responseProvider-dependent — see Provider Disclosure

Card and mobile-wallet payments are made on Kashier's hosted payment page. Full card numbers and security codes are entered there and never reach our systems, and we do not keep wallet numbers. We keep the payment outcome, amount, payment method, card brand and masked card number (which can show the first six and last four digits), Kashier's order and transaction references, and the resulting credit entry. If you choose to save a card, we also keep Kashier's card token and the card's expiry date.

LinkedIn also receives page-view data from our public website pages, to measure our LinkedIn advertising. LinkedIn acts as an independent controller of that data rather than as our sub-processor: LinkedIn Ireland Unlimited Company for visitors in the EU, EEA and Switzerland, and LinkedIn Corporation for everyone else. LinkedIn states that it stores this data in the United States. See the Privacy Policy and the Cookie Policy.

Subscribing to Changes

To receive notifications when this list changes, email support@sovereigneg.com with the subject line Sub-processor notifications.

Objecting to a Sub-processor

If you object to a new sub-processor, contact support@sovereigneg.com within 30 days of the notification. We will work to address your concerns. If we cannot resolve the objection, you may terminate your account per the Terms of Service.