To provide the Corha service, Corha (operated by Corha Technologies Ltd) relies on the third-party providers below. Each one is a “sub-processor”: it processes personal data only as needed to deliver its function, on our instructions, and under a data processing agreement with us. This list forms part of our Data Processing Agreement and should be read with our Privacy Policy.
Infrastructure and AI
Supabase
- Purpose: database, authentication, and file storage.
- Data processed: all account and workspace data, including the content you upload.
- Location: European Union (Ireland).
Anthropic
- Purpose: the Claude AI models that power persona generation, the workspace agent (Ask), insights, and analysis of uploaded images and PDFs.
- Data processed: the specific workspace content sent with each request. Anthropic does not retain it to train its models under its commercial API terms.
- Location: United States (transfers covered by Standard Contractual Clauses).
Vercel
- Purpose: hosting and content delivery for the Corha web application.
- Data processed: request metadata, IP addresses, and server logs.
- Location: United States, with a global edge network.
Billing, email, and monitoring
Stripe
- Purpose: subscription billing and payment processing.
- Data processed: billing contact and subscription metadata. Card details are handled by Stripe under its PCI-DSS compliance and are never stored by Corha.
- Location: United States and European Union.
Resend
- Purpose: delivery of transactional email, including sign-in verification codes, account and billing notices, and notifications you opt in to.
- Data processed: recipient email address and the contents of that email.
- Location: United States and European Union.
Sentry
- Purpose: error and performance monitoring so we can find and fix faults.
- Data processed: technical diagnostics about failed requests (such as error messages, browser and device type, and limited request context). We configure it to avoid capturing the contents of your workspace where we can.
- Location: United States and European Union.
Customer-connected integrations
Separately from the sub-processors above, you can connect your own third-party tools to Corha (for example a CRM such as HubSpot or Salesforce, Google Workspace apps like Gmail, Calendar, and Drive, Slack, Linear, Jira, Zendesk, Notion, Typeform, or Figma). When you connect one, data flows from that provider into your workspace at your direction. Those providers act under your own agreements with them, not as Corha’s sub-processors, and you control what you connect and disconnect.
The same applies in the other direction. If you create an API key and use it, whether through Zapier or your own software, to send workspace data out to another service, that transfer happens at your direction and under your agreement with that service. You can revoke an API key at any time from Settings.
Changes to this list
We will give notice before adding or replacing a sub-processor, and you will have the opportunity to object as set out in our Data Processing Agreement. Questions? info@corha.app.
Last reviewed: 14 August 2026.