Trust Center
Subprocessors
A subprocessor is a third-party service provider that processes customer data on NotAI's behalf as part of delivering the platform. This page lists every subprocessor we currently use, what it does for us, the data it handles, where it operates, and the safeguards that apply.
Current subprocessors
Scroll horizontally to see all columns.
| Subprocessor | Purpose | Data categories | Location | Safeguards |
|---|---|---|---|---|
| Microsoft Azure | Cloud infrastructure and storage | Platform data, including behavioral signals | United States or European Union, per customer region | Data processing agreement; encryption at rest and in transit; region pinning |
| Cloudflare | CDN, WAF, DNS, and DDoS protection | Request metadata at the edge | Global edge network | Data processing agreement; no persistent content storage |
| Constellix (DigiCert, Inc.) | Primary DNS management | DNS query metadata | United States | Data processing agreement |
| Twilio SendGrid | Transactional email | Names, email addresses | United States | Data processing agreement |
| Stripe | Payment processing | Billing contact and payment details | United States | PCI DSS service provider; card data is never stored by NotAI |
This list changes as the platform evolves. We announce subprocessor additions and replacements at least 30 days before they take effect - on the Updates page and by email to subscribers - as committed in Section 5.4 of our DPA. The canonical legal list of subprocessors is maintained in our Data Processing Agreement.
Change notifications
We announce subprocessor additions and replacements at least 30 days before they take effect - on the Updates page and by email to subscribers - as committed in Section 5.4 of our DPA, so you can review each change against your own compliance requirements. Subscribing takes one email and you can unsubscribe at any time by replying.
Subscribe to subprocessor updates