subprocessors data sharing · Privacy Policy
Alloovium policy finding
“ We maintain this list and note material changes. For each sub-processor, we apply the principle of least privilege — each third-party system shall only have access to the minimum personal information required to fulfil its purpose. Sub-Processor Purpose Data Categories Location & Transfer Basis Legal Entity Microsoft Azure Primary Hosting Infrastructure Content, User, Performance, Device, Activity Australia/EEA; APP 8 Microsoft Corporation (Australian operations) Google Cloud Hosting Infrastructure (Redundancy) Content, User, Performance, Device, Activity Australia/EEA; APP 8 Google LLC (Australian operations) OpenAI AI model inference and processing Content USA; APP 8 OpenAI Ireland Ltd Langsmith Application Observability, debugging and tracing Content, Activity USA; APP 8 LangChain Inc. San Francisco, CA, USA Supabase Database hosting and authentication User, Content Singapore; APP 8 Supabase Inc. Singapore 049513 Anthropic Model inference and analysis Content USA/EEA; APP 8 Anthropic Ireland, Limited Dublin 4, Ireland Circleback Meeting transcriptions and summarisation User, Content USA; APP 8 CircleBack, Inc. McLean, VA, USA HubSpot CRM, marketing, customer communications User, Content, Support EEA/USA; APP 8 HubSpot Dublin 2, Ireland PostHog Analytics, session tracking User, Content USA; APP 8 PostHog Inc San Francisco, CA, USA ”
- Document
- Privacy Policy
- Captured
- 2026-07-19
- Location
- Appendix 1 (Pre-Approved Sub-Processors)
- Snapshot SHA-256
- 43b56eb0a62555f2a1b2808f6b7fa5ce56661c6fe4326c2f964ba304a858c640
Informational only, not legal advice. Terms change; verify the source and capture date.