Legal
Subprocessors
The providers that apply depend on the features used and the AI provider selected or connected for the workspace.
1Providers#
| Provider | Purpose | Data potentially processed | When it applies |
|---|---|---|---|
| Vercel | Application hosting and request processing | Account, workspace, and request data needed to operate the web service | All customers |
| Supabase | Authentication, database, and file storage | Account, organisation, workspace, document, output, and administration data | All customers |
| Stripe | Subscription, payment, tax calculation, invoice, and billing-portal processing | Billing contact, billing address, tax-identification, customer, subscription, invoice, and payment-method metadata | When self-service billing or the Stripe customer portal is used |
| SendGrid | Service and authentication email | Recipient address and message-delivery metadata | When service email is sent |
| OpenAI | AI response generation, including customer-connected subscription access | Prompts and the context selected for the request | When selected or connected |
| OpenRouter | Brokered access to selected AI models and document search embeddings | Prompts and the context selected for the request; uploaded document text and images (including images inside Office files) for search embeddings | When selected, and for document search embeddings |
| Google Gemini | Optional AI generation, extraction, visual analysis, or embeddings | Request content and the context selected for the task; uploaded images (including images inside Office files) for visual search embeddings | When selected, and for visual search embeddings |
| Anthropic | Optional AI response generation | Prompts and the context selected for the request | When selected |
| Apify | Optional public-web research | Public source URLs and retrieved public content | When web research uses this provider |
2Security certification#
Consulting AIOS does not currently represent that it holds SOC 2 certification. Customers can review the controls currently available during diligence.
3Provider choice can vary#
The active provider depends on the selected workspace route or customer connection. Material changes to this list will be published here.
4Your own keys may reduce platform processing#
Where supported, customer-supplied provider keys can route model usage through the customer-controlled provider account.