Sub-processors
These companies help us run pAud AI Lite. Each handles only what its service needs. Anthropic is the only one that runs an AI model on anything from your data, and it sees only the structure of your tables and a few masked sample values. A person reviews every result.
| Company | What it does for us | Where | Transfer basis |
|---|---|---|---|
| Cloudflare | DNS, TLS, bot check on the form, and storage of uploaded files in R2 with EU jurisdiction. Uploaded files go straight to storage; pages are not cached. | US company; uploaded files stored in the EU | EU-US Data Privacy Framework and Standard Contractual Clauses |
| Hetzner Online GmbH | Servers that run the intake service and your private pAud. No backups or snapshots. | Germany | Inside the EU; no transfer |
| Resend | Sends our emails: your one-time code, confirmation, reply, access and deletion receipt. Emails carry your address and our message, never data values from your files; the report email names your tables and columns. Resend keeps a log of each email for 30 days; we cannot shorten this. | Sending from the EU (Ireland); company and dashboard in the US | EU-US Data Privacy Framework and Standard Contractual Clauses |
| Anthropic | Proposes how your tables fit together from their structure (table and column names,
types, counts) and up to five sample values per column. Identifiers and free text are
sent as their shape only (for example ORD-48213 becomes
AAA-99999), and personal-looking values are masked before sending.
Anthropic deletes what we send within 30 days; it keeps content longer only if its
safety systems flag it under its usage policy, or if the law requires it. This is the
one place where anything from your data may outlive our 14-day deletion. |
US | EU-US Data Privacy Framework and Standard Contractual Clauses |
Changes
Before we add or replace a sub-processor, we update this page and email every operator whose data we hold, so you can object. See section 6 of the data processing agreement.
Questions: [email protected].