The vendors below may process Customer Data on Rahoto's behalf to deliver the Service. AI providers receive only the input needed for their task: the user's prompt and the structure and aggregate profiles of Customer Data, never raw dataset rows, with common identifiers pseudonymised; media submitted for transcription is processed as submitted. Under their API terms they do not train on Customer Data. AI model endpoints that you configure yourself are not Rahoto sub-processors. We give at least 30 days' notice before adding a sub-processor.
| Sub-processor | Purpose | Data | Location |
|---|---|---|---|
| Hetzner Online GmbH | Application servers and database hosting | All Customer Data at rest in the database | EU (Helsinki, Finland) |
| Cloudflare, Inc. | File storage (R2) for report assets, exports, snapshots and database backups; asset delivery; DNS | Report assets, exports, snapshots and database backups | As set in the Cloudflare contract |
| Resend | Account, verification and delivery-notification email | Recipient email address and message content | As set in the Resend contract |
| Stripe | Subscription billing and payment processing | Billing contact, billing address and payment details | EU / US (SCCs) |
| Sign in with Google; Gemini API as a configured AI provider | Sign-in: name and email. Gemini: Your prompt, plus your data’s structure and aggregate profiles, never raw dataset rows. Names, addresses, emails and phone, card, bank account and national ID numbers are pseudonymised first. Scans and audio you send for transcription are processed as submitted. Not used for training under the provider’s API terms. | EU / US (SCCs) | |
| Microsoft | Sign in with Microsoft | Name and email address | As set in the Microsoft contract |
| Anthropic | Claude API, a configured AI provider for report drafting and reasoning | Your prompt, plus your data’s structure and aggregate profiles, never raw dataset rows. Names, addresses, emails and phone, card, bank account and national ID numbers are pseudonymised first. Scans and audio you send for transcription are processed as submitted. Not used for training under the provider’s API terms. | US (SCCs) |
| OpenAI | OpenAI API, a configured AI provider | Your prompt, plus your data’s structure and aggregate profiles, never raw dataset rows. Names, addresses, emails and phone, card, bank account and national ID numbers are pseudonymised first. Scans and audio you send for transcription are processed as submitted. Not used for training under the provider’s API terms. | US (SCCs) |
| TypeSafe | Advisory check that cited sentences in an AI draft agree with their sources | Sentences from report drafts and the claims they cite | As set in the TypeSafe contract |
| Recraft | Editable vector artwork generation, when enabled | The artwork prompt and redacted design context, never customer datasets | Confirmed in contract before activation |
Notifications
To receive advance notice of changes to this list, email [email protected] with the subject "Sub-processor notifications". Enterprise customers receive notices through their designated security contact.
Related
See the Data Processing Agreement, Privacy Policy, and Trust Center for how this data is protected.