Subprocessors

Clients under a data processing agreement receive advance notice of any addition to this list, with a window to object. The notice period and objection mechanism are set out in the DPA.

This list is a placeholder pending finalisation of production infrastructure, and must be replaced with the real roster before launch. It is shown here so the page structure is complete, not as a statement of fact.

• Cloud infrastructure and hosting — compute, storage and networking. Processes: client data.
• Model inference provider — language model serving under zero-retention, no-training terms. Processes: client data.
• Error and performance monitoring — application telemetry, configured to exclude client data. Processes: operational metadata.
• Transactional email — account and notification email. Processes: business contact data only.
• Customer relationship management — sales and support records. Processes: business contact data only.

Only subprocessors explicitly designated as client-data handling receive records or work product, and each is bound by downstream terms no less protective than our own DPA — including the prohibitions on training and on pooling across clients. The remainder are contractually and technically scoped to business contact data and operational telemetry.