Overview

To deliver the AICSUITE Services, we engage a small set of trusted third parties ("Subprocessors") to process Customer Data on our behalf. Each Subprocessor is bound by written agreements that include data-protection obligations no less protective than those described in our Data Processing Agreement.

AICSUITE remains responsible to Customer for the acts and omissions of its Subprocessors. Where a Subprocessor processes Personal Data originating from the EEA, UK, or Switzerland and the destination country lacks an adequacy decision, AICSUITE relies on Standard Contractual Clauses (or equivalent) with that Subprocessor.

Infrastructure Subprocessors

Subprocessors providing the underlying compute, storage, network, and AI inference infrastructure for the Services.

Subprocessor	Purpose	Data Processed	Location
Amazon Web Services, Inc.	Application hosting (AWS Amplify) and cloud AI inference (AWS Bedrock)	All Customer Data and Personal Data in transit and at rest during processing; AI prompt/response data for Manager and Executive AI features	United States
Supabase, Inc.	Managed PostgreSQL database, authentication, and object storage	All Customer Data at rest (including encrypted sensitive identifiers), authentication credentials (hashed)	United States
Cloudflare, Inc.	CDN, DNS, TLS termination, DDoS protection, and bot management for the marketing site	IP address, request metadata, security telemetry	United States (global edge)

Operational Subprocessors

Subprocessors supporting specific operational functions such as billing and transactional email.

Subprocessor	Purpose	Data Processed	Location
Stripe, Inc.	Subscription billing and payment processing	Account holder name, email, billing address, payment-method details (handled directly by Stripe; AICSUITE does not store full card numbers)	United States

Updates and Notice

AICSUITE will update this page when adding, removing, or replacing Subprocessors that process Personal Data. Where reasonably practicable, we provide at least thirty (30) days' prior notice of a new Subprocessor by updating this page and, for customers with active paid subscriptions, by email or in-application notification.

Customers may object to a new Subprocessor on reasonable data-protection grounds as described in the Data Processing Agreement.

To subscribe to updates or request additional information, contact privacy@aicsuite.com.