What is a subprocessor? A subprocessor is a third-party processor engaged by Iridae that may access or process Customer Data while delivering the service. Vendors that do not access or process Customer Data are treated as subcontractors, not subprocessors.
Due diligence. Iridae applies a commercially reasonable vendor assessment process focused on security, privacy, confidentiality, and operational reliability before onboarding subprocessors.
Contractual safeguards. Iridae requires subprocessors to meet obligations materially consistent with Iridae’s own processor commitments, including requirements to:
- process personal data only under documented instructions communicated by Iridae;
- use personnel bound by confidentiality and data protection obligations;
- implement and maintain appropriate technical and organizational security measures;
- notify Iridae without undue delay of confirmed or suspected security incidents; and
- cooperate with Iridae to support lawful requests from controllers, data subjects, and authorities.
This notice is provided for transparency and does not create additional contractual rights. The table below reflects the subprocessors Iridae uses as of the publication date of this page.
| Subprocessor | Category | Purpose | Data involved | Entity location | Transfer safeguard |
|---|---|---|---|---|---|
| Amazon Web Services | Cloud / Infrastructure | Hosting + compute for inference for our first-party models; storage/networking as needed | Customer Content submitted for inference; limited operational metadata/logs | United States | Data Processing Agreement with Standard Contractual Clauses |
| Microsoft Azure | Cloud / Infrastructure | Hosting + compute for inference for our first-party models; storage/networking as needed | Customer Content submitted for inference; limited operational metadata/logs | United States | Data Processing Agreement with Standard Contractual Clauses |
| NVIDIA | Compute / Infrastructure | Hosted compute/inference infrastructure (where used) for first-party model inference | Customer Content submitted for inference; limited operational metadata/logs | United States | Data Processing Agreement with Standard Contractual Clauses |
| OpenAI | Model provider | Third-party model inference used to generate Outputs (where selected) | Customer Content sent to provider for inference; provider returns Outputs | United States | Data Processing Agreement with Standard Contractual Clauses |
| Anthropic | Model provider | Third-party model inference used to generate Outputs (where selected) | Customer Content sent to provider for inference; provider returns Outputs | United States | Data Processing Agreement with Standard Contractual Clauses |