Subprocessors
These are the third-party services that process customer data on behalf of JCIL.AI. Every item lists what it does, what data it sees, and where the processing happens. We notify B2B customers 30 days before adding or removing a subprocessor that handles their data.
| Service | Purpose | Data received | Region | Policy |
|---|---|---|---|---|
| OpenAI | Large-language model inference, content moderation, chat, reasoning, document generation, code interpretation, native web search, and image generation | User messages, system prompts, attached files when passed to the model | US | View |
| Supabase | Authentication, PostgreSQL database, file storage | All application data — profiles, conversations, messages, memories, API keys (hashed), billing transactions, uploaded files | US (us-east-2) | View |
| Vercel | Application hosting, edge middleware, DNS, production deployment infrastructure | All request metadata (IP, user agent, path, timings); response bodies for caching | US (primary iad1) | View |
| Stripe | Payment processing for credit purchases and subscriptions | Name, email, payment method (card number never touches JCIL.AI servers) | US | View |
| Resend | Transactional email delivery (welcome, receipts, digests, alerts) | Email address, name, email content | US | View |
| Upstash | Redis-backed rate limiting and ephemeral counters | Rate-limit buckets keyed by user ID or IP — counts only, no message content | US | View |
| E2B | Ephemeral sandbox execution for Playwright browser automation and Chromium-based PDF rendering | Documents and code snippets passed to the sandbox for the duration of a single request | US | View |
| Google Cloud | Video generation and music generation | User prompts passed to generative models | US | View |
| AtlasCloud | Supplementary model inference for specific generation workloads | User prompts passed through for generation | US | View |
Subscribe to subprocessor changes
B2B customers can request 30-day advance notice of any change to this list. Submit your company email through the compliance contact form with topic: subprocessor notifications.
Last updated: April 17, 2026.