Subprocessors
Providers actually used to deliver the service. Changes are announced with reasonable notice.
Current list
| Entity | Service | Data | Location | Transfer |
|---|---|---|---|---|
| Supabase | Database, authentication, file storage | Account data, client content, assessment requests | EU | — |
| Cloudflare | Application hosting and delivery | Technical connection data | EU / US | SCC |
| OpenAI | AI environment observation (API) | Test prompts and brand facts | US | SCC |
| Anthropic | AI environment observation (API) | Test prompts and brand facts | US | SCC |
| AI environment observation (Gemini API) | Test prompts and brand facts | US / EU | SCC | |
| Perplexity | AI environment observation (API) | Test prompts and brand facts | US | SCC |
SCC: European Commission Standard Contractual Clauses, with a transfer assessment and supplementary measures where applicable.
AI providers
Content sent to AI providers is limited to test prompts and brand facts. Special categories of data are not sent. Each provider's business terms, including training use, are verified before activation.