Sub-processors
- Effective
- September 11, 2026
- Updated
- September 11, 2026
- Applies to
- Platform customers
In plain English
These are the vendors that help us run the platform and may process customer data on our behalf. Each is under contract to protect the data, use it only for us, and, for AI providers, never train on it. We update this list before adding a new sub-processor.
1. How we use sub-processors
Ottonomous Technologies Inc engages the third parties below to help provide the Services. Each is bound by a written agreement that requires it to protect personal information, process it only on our instructions, and meet security obligations at least as protective as ours. AI model providers are additionally prohibited from using customer data to train their models.
2. Current sub-processors
| Provider | Purpose | Location |
|---|---|---|
| Anthropic | AI models for assistants, routines, and content generation | United States |
| OpenAI | AI models for selected generation, transcription, and embedding tasks | United States |
| Google (Google Cloud, Gemini) | AI models for selected generation and media tasks | United States |
| Amazon Web Services | Object storage for files and media | United States |
| MongoDB Atlas | Primary application database | United States |
| ClickHouse | Analytics and conversation event storage | United States |
| Cloudflare | Content delivery, DNS, edge security, and hosting for customer websites | Global edge, United States origin |
| Modal | Serverless compute for media processing and background jobs | United States |
| Twilio | SMS, MMS, voice, and phone number provisioning | United States |
| Twilio SendGrid | Transactional and platform email delivery | United States |
| Stripe | Payment processing and subscription billing | United States |
| GitHub | Source control and automation for websites we build for customers | United States |
3. Connected services you choose
Services you connect to the platform (for example, Google Ads, Meta, your DMS or CRM) receive data at your direction and are not sub-processors. Their handling of your data is governed by your agreements with them.
4. Changes to this list
We will update this page at least 15 days before a new sub-processor begins processing customer data. Customers with a Data Processing Addendum may object in writing within that period; if we cannot address the objection, either party may terminate the affected feature. Subscribe to updates by emailing [email protected] with the subject "Sub-processor updates".