Subprocessors

Infrastructure and model providers used to operate Consulting AIOS.

Effective 17 July 2026. The providers that apply depend on the features used and the AI provider selected or connected for the workspace.

Provider	Purpose	Data potentially processed	When it applies
Vercel	Application hosting and request processing	Account, workspace, and request data needed to operate the web service	All customers
Supabase	Authentication, database, and file storage	Account, organisation, workspace, document, output, and administration data	All customers
Stripe	Subscription and payment processing	Customer, subscription, invoice, and payment metadata	Only when paid billing is used
SendGrid	Service and authentication email	Recipient address and message-delivery metadata	When service email is sent
OpenAI	AI response generation, including customer-connected subscription access	Prompts and the context selected for the request	When selected or connected
OpenRouter	Brokered access to selected AI models	Prompts and the context selected for the request	When selected
Google Gemini	Optional AI generation, extraction, visual analysis, or embeddings	Request content and the context selected for the task	When selected
Anthropic	Optional AI response generation	Prompts and the context selected for the request	When selected
Apify	Optional public-web research	Public source URLs and retrieved public content	When web research uses this provider

Security certification

Consulting AIOS does not currently represent that it holds SOC 2 certification. Customers can review the controls currently available during diligence.

Provider choice can vary.

The active provider depends on the selected workspace route or customer connection. Material changes to this list will be published here.

BYO keys may reduce platform processing.

Where supported, customer-supplied provider keys can route model usage through the customer-controlled provider account.

Read this with the privacy and retention documents.

Privacy Data retention