Sub-processors
Last updated 7 September 2026 · Referenced by the Privacy Policy and the Data Processing Addendum.
These are every third party that can process customer data on our behalf, what each does, and where it is located. Fill this table in with what your deployment actually uses before you publish it. A sub-processor list that does not match reality is worse than none.
| Provider | Purpose | Data | Location | Transfer basis |
|---|---|---|---|---|
| Stripe | Payment processing, tax calculation, invoicing | Name, email, billing address, payment method (held by Stripe, not by us), transaction history | Ireland / United States | Standard Contractual Clauses |
| [Hosting provider] | Application hosting and compute | All application data in transit and at rest | [Region] | [EEA / SCCs] |
| [Database / storage provider] | Primary datastore and backups | Account data, parsed documents, activity logs | [Region] | [EEA / SCCs] |
| [Transactional email provider] | Account, billing and support email | Email address, message content | [Region] | [EEA / SCCs] |
| [AI model provider, if the generative layer is enabled] | Rewriting retrieved passages into a conversational answer | The retrieved passages and the visitor's question only | [Region] | [SCCs] |
| [Error monitoring, if used] | Diagnosing faults | Stack traces, request metadata, IP address | [Region] | [EEA / SCCs] |
Model providers
The default processing pipeline is deterministic and sends nothing to any AI model provider.
Where the optional generative layer is enabled, only the retrieved passages and the visitor's question are sent to the model provider named above — never your whole index. Retrieval, ranking and grounding happen entirely within our systems. With no model provider configured, no such transfer occurs at all and the assistant answers extractively from your own content.
Changes
We will update this page before a new sub-processor starts processing customer data. To be notified in advance, email privacy@sprosimo.net and we will add you to the notification list. If you object to a new sub-processor on reasonable data-protection grounds, tell us within 30 days; if we cannot resolve it you may terminate and we will refund any prepaid unused period.