What is processed
Customer, support, billing, and module records are processed to provide the service. If you record your own customers in SONARA, their details are processed on your behalf and remain yours.
Credentials stay on the server
Service-role credentials are server-only and are never sent to a browser. A check in the release pipeline fails the build if one appears in client code.
Who else is involved
Supabase stores the records, Vercel runs the server, Stripe takes the payments, and Resend delivers email. Analytics providers are processed only where you have configured one.
Nothing third-party loads in your browser
Pages are served from SONARA infrastructure and load no third-party fonts, scripts, or trackers, so no outside company receives your IP address by your simply opening a page. No advertising or analytics cookie is set by SONARA.
Getting a copy or asking for erasure
Your data page exports your records immediately, and sends an erasure request that a person reviews.