SUB-PROCESSORS
Who we share your data with.
A minimal, audited list. Every sub-processor is bound by a data processing agreement with Atlantic. We notify you 30 days before adding new ones.
Last updated: 2026-06-02. We will update this list at least 30 days before adding or replacing any sub-processor. Customers subject to a DPA may object to changes on legitimate data protection grounds. Questions? info@getatlantic.ai.
| Sub-processor | Purpose | Data types processed | Region |
|---|---|---|---|
| Amazon Web Services (AWS) | Cloud hosting, compute, storage, and LLM inference via AWS Bedrock (Anthropic Claude models) | All customer data at rest and in transit; LLM inference inputs/outputs | United States (us-east-1 primary) |
| Supabase | Managed PostgreSQL database hosting | Structured application data (user records, conversations, knowledge base metadata) | EU (eu-central-1) and United States |
| PostHog | Product analytics and session replay | Usage events, feature interaction data, session recordings (analytics only, consent-gated) | European Union (EU Cloud) |
| Resend | Transactional email delivery (account notifications, security alerts, invoices) | Email address, name, email content | United States |
NO-TRAINING COMMITMENT
None of the sub-processors listed above train AI models on your data. AWS Bedrock does not use API inputs for model training. This is contractually guaranteed.
GDPR & KVKK
All sub-processors are covered by Standard Contractual Clauses (SCCs) for EU/EEA data. Turkish customer data residency is maintained in-region where available.
CHANGE NOTICE
We will email active subscribers at least 30 days before adding or replacing a sub-processor. Enterprise customers may object per their DPA terms.