Legal

Sub-processors

The providers that may process your personal data when we work for you, what each one does and where. Last updated 18 October 2026.

Current list

ProviderWhat it does for usWhereApplies to
TensorX Ltd. (Dublin, Ireland)Runs the AI models for hosted environments, under written zero data retention: it keeps nothing and trains on nothing.Ireland and Finland (Dublin, Helsinki)Hosted
Amazon Web Services EMEA SARL (Luxembourg)Hosts each customer’s dedicated environment, its storage and backups.Ireland (AWS eu-west-1)Hosted
Amazon Simple Email Service (AWS EMEA SARL)Sends notification emails from hosted environments.Ireland (AWS eu-west-1)Hosted
Cloudflare, Inc. (United States)DNS, TLS and the network edge that carries traffic to hosted environments.Global edge networkHosted
GitHub, Inc. (United States)Stores the configuration of your installation in a private repository and runs our build and deployment pipelines. No customer data exports, samples or credentials are kept there.United StatesHosted
Google Cloud EMEA Ltd. (Ireland), Google WorkspaceOur email and files, including support requests and samples you send us.EU and United StatesAll customers
Linear Orbit, Inc. (United States)Our issue tracker. Tickets about your workflows can include samples or screenshots.United StatesAll customers

“Hosted” means environments we run for you. If you run Iterabase on your own servers, the AI models and hosting are yours, and only the providers marked “All customers” apply.

Transfers outside the EU

When a provider processes data outside the European Economic Area, the transfer relies on the European Commission’s standard contractual clauses or an adequacy decision, as set out in our data processing agreement.

Changes

We tell customers before we add or replace a sub-processor, as set out in the data processing agreement, so you can object. Questions: hello@iterabase.com.