AIARCO
Get API Key
Trust & Security

Sub-processors

Third parties that may process AIARCO customer Personal Data.

Sub-processors

To deliver the AIARVA service we engage a small number of sub-processors that may process Personal Data on our behalf. Each is bound by a Data Processing Agreement (DPA), and where required, EU Standard Contractual Clauses (SCCs) and equivalent UK/Swiss instruments.

We notify customers of any new sub-processor at least 30 days before it begins processing Personal Data, via in-product banner and email to the workspace billing contact. Customers on Teams Scale may object in writing within that window; we will attempt to find a mutually acceptable alternative.

Current list

#Sub-processorPurposeDataRegion(s)
1Amazon Web ServicesHosting, compute, storage, networkAllus-east-1, eu-west-1
2VercelFrontend hosting + edgeApp contentGlobal edge
3CloudflareDNS + DDoS + edge cachingNone at restGlobal edge
4StripePayments + billingPayment dataUS
5ClerkAuthentication, MFA, sessionsAuth metadataUS
6Temporal TechnologiesWorkflow orchestrationWorkflow stateUS (multi-region)
7SentryError trackingStack traces (scrubbed)US
8HoneycombTelemetry / OpenTelemetryTrace metadataUS
9OpenAILLM inferencePrompts (no-train)US
10AnthropicLLM inferencePromptsUS
11Google (Gemini API)LLM inferencePromptsUS, EU
12OpenRouterLLM router (fallback)PromptsUS
13BrowserbaseCloud browser sandboxURLs visitedUS
14E2BCloud code execution sandboxSource snippetsUS
15MailgunTransactional emailEmail addressesUS, EU
16PostHogProduct analytics (consent-gated in EEA)Anonymised eventsUS (EU on request)
17TwilioSMS / voice (optional skill)Phone numbersUS

Last updated: 2026-05-09.

How to be notified

To receive sub-processor change notifications by email, contact privacy@aiarco.com from your workspace billing email. Customers on Teams Scale also see in-product banners.