Vendor management
Sub-processors
The 16 third parties that participate in delivering Claresia. Filter by category, region, or data type. All sub-processors operate under an executed DPA; LLM providers carry contractual zero-retention clauses.
16
Total sub-processors
3
LLM providers (zero retention)
4
Cloud infrastructure providers
30 days
Pre-notification before any new sub-processor
Showing 16 of 16 sub-processors.
| Purpose | Data | DPA | ||||
|---|---|---|---|---|---|---|
Amazon Web Services | Cloud Infrastructure | Planned — primary IaaS for Mode B dedicated tenants (RDS Aurora Postgres, KMS, Secrets Manager, S3, Lambda). EU residency. | eu-south-1 (Milano, primary) + eu-central-1 (Frankfurt, failover). | Customer contentAudit logsTelemetryAccount metadata | planned Q3 2026 (Mode B GA) | View |
Anthropic Zero retention | LLM | Internal R&D — Claresia engineering uses Claude API (Sonnet, Haiku) to develop and test the platform. Customer-facing skill execution will route through customer-tenant Anthropic Enterprise contracts (planned Q2 2026). | us-east-1 / us-west-2 (Anthropic primary) | Account metadata | 2026-04-26 | View |
Anthropic Enterprise Zero retention | LLM | Planned — customer-tenant skill execution. Each customer brings their own Anthropic Enterprise contract; Claresia's Distribution Plane publishes skills into the customer's workspace via Admin API. | eu-central-1 (Anthropic EU residency, when available); us-east-1 fallback. | Customer content | planned Q2 2026 (when first Mode A/B Claude customer signs) | not-yet-contracted |
Atlassian Statuspage (or Better Stack) | Observability | Planned — production status-page subscriber infrastructure (email, Slack webhook, RSS, generic webhook subscribers). Today the Status Page is real-ping driven but has no subscriber backend. | US primary (Atlassian); EU available (Better Stack is alternative). | Account metadata | planned Q1 2026 | not-yet-contracted |
Datadog (or Honeycomb) | Observability | Planned — production monitoring, SLO burn-rate alerting, log aggregation, distributed tracing. EU residency for Italian customers. | EU residency (Datadog EU site or Honeycomb-with-EU-tenant). | TelemetryAudit logs | planned Q2 2026 | not-yet-contracted |
GitHub (Microsoft) | Source Control | Source-control + CI/CD for the Claresia codebase. No customer data is stored in repositories. | US (GitHub primary), backup EU mirrors | Source code | 2026-04-26 | View |
Google Cloud Platform | Cloud Infrastructure | Planned — Mode C BYOC alternative for customers preferring GCP. Cloud SQL Postgres, KMS, Cloud Run, VPC Service Controls. | europe-west8 (Milano) + europe-west12 (Turin). | Customer contentAudit logsTelemetryAccount metadata | planned Q4 2026 (Mode C GA) | not-yet-contracted |
HubSpot | Communications | Planned — CRM + customer success automation (welcome workflows, monthly business review prep, renewal pack auto-generation). | EU residency (HubSpot EU tenant). | Account metadataSupport correspondence | planned Q1 2026 | not-yet-contracted |
Microsoft (Copilot M365) | LLM | Planned — Copilot Studio agents published to customer's M365 tenant. Customer's Copilot M365 contract governs LLM execution. | Customer's M365 region (italynorth Milano default for Italian customers). | Customer content | planned Q2 2026 (Dainese pilot) | not-yet-contracted |
Microsoft Azure | Cloud Infrastructure | Planned — Mode B/C alternative for Microsoft-shop customers (Azure Database for PostgreSQL Flexible Server, Key Vault HSM, Functions, Storage). italynorth region for Italian customers. | italynorth (Milano) + westeurope (Amsterdam) failover. | Customer contentAudit logsTelemetryAccount metadata | planned Q3 2026 (Mode B GA) | not-yet-contracted |
Netlify | Cloud Infrastructure | Static hosting + edge functions + serverless functions for all Claresia public surfaces (claresia.com, trust.claresia.com, status.claresia.com, claresia-cc-* scaffold deployments). | Global Netlify Edge CDN. Underlying primary AWS regions: us-east-1 (Netlify control plane), eu-west-1 (Netlify EU build infrastructure). | Site assetsAccount metadata | 2026-04-26 | View |
Postmark (or SendGrid EU) | Communications | Planned — transactional email (welcome emails, magic links, audit notifications). EU residency required for Italian customers. | EU (vendor selection pending). | Account metadata | planned Q1 2026 | not-yet-contracted |
Stripe | Billing | Planned — billing engine for SaaS subscriptions, invoicing (with Italian VAT / partita IVA support), marketplace billing reconciliation. | EU (Stripe EU entity for Italian + EU customers). | Billing recordsAccount metadata | planned Q1 2026 (first invoice). | not-yet-contracted |
Supabase | Database | Planned — managed Postgres + Storage + Edge Functions for the production Hub data plane (cc-050). EU-region project for Italian + EU customers. | eu-central-1 (Frankfurt) Supabase EU project planned. | Customer contentAudit logsAccount metadata | planned Q1 2026 | not-yet-contracted |
Vanta (or Drata) | Compliance | Planned — continuous compliance monitoring for SOC 2, ISO 27001, ISO 42001, GDPR. Trust Center automation. | US primary (vendor selection pending; EU residency requirement is a selection criterion). | Account metadataAudit logs | planned Q1 2026 (audit window opens) | not-yet-contracted |
WorkOS | Identity | Planned — SSO (SAML 2.0 + OIDC), SCIM 2.0 user provisioning, Directory Sync. Will replace mock-JWT login in cc-059 Command Center. | US primary; EU residency available for EU-tier customers. | Identity claims | planned Q1 2026 | not-yet-contracted |
Notification policy. Claresia will notify customers of any new sub-processor or material change at least 30 days before that sub-processor begins processing customer data. Subscribe to sub-processor change notifications →