Trust Center

Subprocessors

A subprocessor is a third-party service provider that processes customer data on NotAI's behalf as part of delivering the platform. This page lists every subprocessor we currently use, what it does for us, the data it handles, where it operates, and the safeguards that apply.

Current Subprocessors

Scroll horizontally to see all columns.

Subprocessor Purpose Data categories Location Safeguards
Microsoft Azure Cloud infrastructure and storage Platform data, including behavioral signals United States or European Union, per customer region Data processing agreement; encryption at rest and in transit; region pinning
Cloudflare CDN, WAF, DNS, and DDoS protection Request metadata at the edge Global edge network Data processing agreement; no persistent content storage
Constellix (DigiCert, Inc.) Primary DNS management DNS query metadata United States Data processing agreement
Twilio (SendGrid) Transactional email and phone (voice/SMS) communications Names, email addresses, and phone numbers where provided United States Data processing agreement
Stripe Payment processing Billing contact and payment details United States PCI DSS service provider; card data is never stored by NotAI
Google LLC Business email communications Names, email addresses, and message content of business correspondence United States Data processing agreement; standard contractual clauses where applicable

This list changes as the platform evolves. We announce subprocessor additions and replacements at least 30 days before they take effect on the Updates page, as committed in Section 5.4 of our DPA. The canonical legal list of subprocessors is maintained in our Data Processing Agreement.

Change Notifications