Subprocessors
Ultron uses a small number of third-party services to deliver the platform. Each is engaged under data protection terms compatible with the GDPR. This page lists every subprocessor, where it is located, what category of personal data it touches, and what role it plays.
Overview
A subprocessor is a third party we engage to process personal data on behalf of customers. We list each one publicly. We give at least thirty days advance notice before adding a new subprocessor that touches Customer Personal Data, and we let customers object on reasonable data protection grounds. The Data Processing Addendum describes the procedural detail.
Each table below lists the subprocessor, the country where data is primarily processed, the categories of data touched, and the function it performs. Country fields use the country of the operating entity rather than every datacentre location. Where the operating entity processes data outside the European Economic Area, transfers rely on the Standard Contractual Clauses and supplementary measures noted on the Security page.
Core platform
The infrastructure that hosts the application, the database, and the edge runtime.
| Subprocessor | Country | Data | Role |
|---|---|---|---|
| Google Cloud (Cloud Run, Cloud Build, Artifact Registry) | Ireland (eu-west / europe-west1) | All Customer Personal Data in transit and at rest on the application tier | Hosts the Next.js application, builds images, stores artifacts |
| Cloudflare (Workers, R2, D1, Vectorize, Workers AI) | United States, edge points globally | Cached requests, R2-stored binary assets, D1 carousel engine state, Vectorize embeddings | Provides edge runtime, object storage, edge database, vector search, ancillary inference |
| Supabase (Postgres, Storage, Auth) | Ireland (eu-west) | Account data, content, embeddings, billing references | Primary database, file storage, authentication broker |
Model providers
The vendors that run the foundation models behind the chat and skill loops.
| Subprocessor | Country | Data | Role |
|---|---|---|---|
| Anthropic | United States | Prompts and conversation history sent for inference, tool results returned to the model | Primary model provider for Haiku, Sonnet, Opus tiers |
| OpenAI (embeddings only) | United States | Text passed to the embedding endpoint | Generates 1536-dimensional vectors used for memory retrieval |
| Cloudflare Workers AI | United States | Default lite-tier chat prompts, planner inputs, image-scoring inputs, classifier and docs-support inputs | Hosts and runs Kimi K2.6 (the default lite-tier model, authored by Moonshot AI), Gemma for planning, and LLaVA for image scoring. The model authors do not receive data directly; Cloudflare is the processor in this path |
Communications
Email delivery and notification providers.
| Subprocessor | Country | Data | Role |
|---|---|---|---|
| Brevo | France | Recipient email addresses, message content, delivery metadata | Sends transactional email (account, lifecycle, share notifications) and customer outbound campaigns |
| Google (Gmail API, on customer consent) | United States | Email content sent via the connected user's own Gmail account | Sends and reads email on behalf of the connected user |
Data ingestion
The actors and APIs that bring outside data into the workspace.
| Subprocessor | Country | Data | Role |
|---|---|---|---|
| Apify | Czech Republic | Search inputs, scraped results, webhook payloads | Runs the maps, jobs, and email-finder actors |
| Apollo | United States | Lookups by name, email, domain, title | People and company enrichment |
| Browserbase | United States | URLs visited, content extracted via headless Chromium | Residential-proxy fallback for scraping |
| United States | Search queries against Reddit JSON endpoints | Source for the public Reddit research tool |
Billing and tax
Payment processing and invoicing.
| Subprocessor | Country | Data | Role |
|---|---|---|---|
| Stripe | Ireland (EU operating entity) | Cardholder name, billing address, last four digits of card, VAT identifier, invoice line items | Processes payments, hosts invoices, computes VAT |
Support and observability
The tools we use to keep the lights on.
| Subprocessor | Country | Data | Role |
|---|---|---|---|
| PostHog | United States, EU hosting available | Pseudonymised product analytics events | Product analytics and feature flag delivery |
| Sentry | United States, EU hosting available | Error traces, user agent, masked user id | Error tracking |
How changes are notified
We update this page when a subprocessor is added, removed, or replaced. Material additions are announced at least thirty days in advance with a banner inside the product and an email to the customers who subscribed to subprocessor notifications. To subscribe, write to privacy@51ultron.com.
How to object
Customers covered by the Data Processing Addendum can object to a new subprocessor on reasonable data protection grounds within the notice window. Send the objection and the grounds to privacy@51ultron.com. If we cannot resolve the objection, you may terminate the affected portion of the service and receive a prorated refund of any pre-paid fees for that portion.