Sub-processors
The third parties that process partner data on our behalf. Each is engaged under a data processing agreement that flows down the terms of ours, and each is approved before use.
Draft — lawyer review before publication.
Section 1 — sub-processors
List as of 2026-09-01. Every entry is provisional until the cloud host and the model provider are confirmed.
Current list
| Name | Purpose | Region | Status |
|---|---|---|---|
| Cloud host — placeholder — confirm | Compute, managed database, object storage, backups and key management for each partner environment | ap-south-1 (India), eu-central-1 (EU) or us-east-1 (US), chosen per SOW | planned |
| LLM API provider — placeholder — confirm | Model inference for extraction, classification and agents; no-training and no-retention terms required | placeholder — confirm per provider and SOW | planned |
| Transactional email provider — placeholder — confirm | Portal notifications and alerts; no partner documents or audio in email | placeholder — confirm | planned |
| Error monitoring — placeholder — confirm | Application error and performance telemetry; partner content scrubbed before send | placeholder — confirm | planned |
Website services
| Name | Purpose | Data |
|---|---|---|
| Vercel | Hosting for this website | Request logs, including IP addresses |
| Plausible | Page-view analytics | Aggregated, no cookies |
| Cloudflare Turnstile | Bot check on the pilot request form | The check token and browser signals |
| Resend | Delivery of pilot request emails to partners@ | The form submission |
Section 2 — the list
Website services handle only what the website collects. They do not see partner documents.
Changes to the list
We give partners 30 days’ notice before adding or replacing a sub-processor that handles their data. Notice goes to the contact named in the DPA. A partner may object within that period on reasonable data-protection grounds; if the objection cannot be resolved, the partner may terminate the affected SOW as the DPA provides.
Questions about this list: security@entailmentlabs.com. The full security posture is on the security page.
Section 3 — changes
The notice period matches the DPA annex. Drafted; lawyer review pending.