This page lists the third parties ("Sub-processors") that The Company Company Inc. ("Company," "Co," "we") uses to process Customer Data in providing the Application. It is incorporated by reference into our Data Processing Agreement (https://www.thecompany.company/legal/dpa) and Privacy Policy (https://www.thecompany.company/legal/privacy).
We update this page when we add or replace a Sub-processor. To receive email notice of changes, write to legal@thecompany.company with the subject "Sub-processor notifications."
Infrastructure
| Sub-processor | Purpose | Location |
|---|---|---|
| Amazon Web Services, Inc. | Cloud hosting: compute (EKS), databases (Aurora PostgreSQL), cache (Redis), object storage (S3), container registry, observability | United States |
| Vercel Inc. | Hosting of the marketing website and documentation; web performance analytics | United States |
| Cloudflare, Inc. | DNS and edge networking | United States (global edge) |
| E2B, Inc. | Isolated sandbox environments in which agents clone repositories, run commands, and store working files | United States |
| Modal Labs, Inc. | Serverless compute for our embedding and reranking inference service and for hosted open-weight language models (for example Z.ai and Moonshot models) when selected by the organization's model policy | United States |
AI model providers
Model providers receive prompts, context, and tool results needed to serve a request and return model outputs. Under our agreements with them, they do not use Customer Data to train their models. Requests you route through your own subscription with a provider are governed by that provider's terms, not by our agreement with it.
| Sub-processor | Purpose | Location |
|---|---|---|
| Anthropic, PBC | Large language model inference | United States |
| OpenAI, L.L.C. | Large language model inference | United States |
| Google LLC | Large language model inference | United States |
| xAI Corp. | Large language model inference | United States |
| DeepSeek (Hangzhou DeepSeek Artificial Intelligence Co., Ltd.) | Large language model inference, only when selected by the organization's model policy | China |
| OpenRouter, Inc. | Model routing to the providers above and to additional providers selected by the organization's model policy | United States |
Agent tools
| Sub-processor | Purpose | Location |
|---|---|---|
| Exa Labs, Inc. | Web search queries issued by agents | United States |
| Expand AI, Inc. | Fetching and extracting web pages requested by agents | United States |
Business operations
| Sub-processor | Purpose | Location |
|---|---|---|
| Autumn (Autumn Technologies, Inc.) | Subscription, credit, and usage billing | United States |
| Stripe, Inc. | Payment processing (as a sub-processor of Autumn and directly for invoices) | United States |
| PostHog, Inc. | Product analytics and session replay for the Application and website | United States |
| Resend, Inc. | Transactional email delivery | United States |
Connected Services are not Sub-processors
Third-party services you connect to the Application (for example, Slack, GitHub, Google Workspace, Linear, Notion, Attio, or any MCP server) receive data because you instructed an agent to act in them. They act under their own terms with you and are not our Sub-processors.
Contact
Questions about this list: legal@thecompany.company.