Sub-processors & change notice

We use a small set of vetted vendors to run Canoma. Each has contractual confidentiality, security obligations, and least‑privilege access. We’ll update this page at least 30 days before adding or replacing any sub‑processor. If you have reasonable, documented objections, email privacy@canoma.app.

Current vendors (example format)

• Cloud IaaS — Hosting & storage (rule text, schema metadata, audit logs) — UAE region
• Email (transactional) — Account emails/notifications (name, email) — [Region]
• Error monitoring — Telemetry & error traces (pseudonymous IDs) — [Region]

Full details (purpose, data, region) appear in the table below.