Orchra Back to Orchra
Sub-processors
Last updated: 31 May 2026
Status: pre-launch. Orchra is onboarding a limited early-access cohort. The information below describes our current practices and the program we are building toward Saudi enterprise and public-sector procurement requirements. We do not claim any certification (such as SOC 2, ISO 27001, or NCA ECC/CCC) until it is formally completed and evidence is available.
Orchra uses a small number of sub-processors that process personal data on our instructions to operate the marketing site and early-access program. We require each to protect your data and to use it only for the purpose we specify. To be notified of changes to this list, email privacy@orchra.io.
| Sub-processor | Purpose | Data categories | Location | Transfer mechanism |
|---|---|---|---|---|
| Cloudflare, Inc. | Content delivery, hosting and security for the marketing site (orchra.io) | IP address, request metadata | Global edge network | PDPL Transfer Regulations; SCCs for EU/UK visitors |
| Application backend hosting | Stores early-access / waitlist submissions (app.orchra.io) | Email, company, role, team size, phone (as provided) | Kingdom of Saudi Arabia | In-Kingdom (no transfer) |
| Plausible Insights OÜ | Aggregate, cookieless web analytics | Aggregate page-view data; no personal data | European Union | Not applicable (no personal data) |
How we manage changes
We keep this list current. When we add or replace a sub-processor that processes personal data, we will update this page. Customers and waitlist members can request advance notice of material changes by emailing privacy@orchra.io. Full detail on how we handle data is in our Privacy Policy and Saudi PDPL page.