1. What Is a Sub-Processor
A sub-processor is a third party that we allow to process customer data - source documents, workflow data, or personal information - in order to deliver the Atlasweave service.
We publish this list so you can see exactly who touches your data before you send us any. It is reviewed quarterly and updated whenever a sub-processor is added or removed.
2. Current Sub-Processors
| Sub-processor | Purpose | Data processed | Location |
|---|---|---|---|
| Amazon Web Services | Cloud infrastructure - hosting, document storage, database, authentication and email delivery. | Source documents, workflow and canvas data, account email addresses, session state. | Ireland (eu-west-1) |
| Amazon Bedrock | Managed model inference (Anthropic Claude) for document extraction and analysis. Model-invocation logging is disabled, so no prompt or response content is retained after the call. | Text from your source documents. | EU (EU-only inference) |
| Langfuse | Observability for the extraction pipeline - one trace per run, used to diagnose failures and improve quality. | Prompt and model-output content. Credentials and email addresses are removed before the data leaves our infrastructure. | EU (Langfuse Cloud EU) |
| GitHub | Source-code hosting and CI/CD pipelines. | None. No customer data is transferred to GitHub. | United States |
3. Where Your Data Is Processed
All customer data is stored and processed in the EU (Ireland). Model inference runs on an EU-only inference profile, so document content does not leave the EU. Observability traces are sent to the EU instance of Langfuse; a US endpoint is refused in code rather than merely unconfigured.
GitHub is listed for completeness because it is part of how we build and ship the product. It receives source code only - no customer data reaches it.
4. Changes to This List
We update this page when our sub-processors change, and we review the list every quarter regardless. If you would like to be notified in advance of changes, email security@atlasweave.ai and we will add you to the notification list.
5. Contact
For questions about this register, our data processing agreement, or our wider compliance posture, contact security@atlasweave.ai.
Our security overview sets out encryption, retention and access controls in more detail.