Subprocessors
These are the third-party services that process customer data on behalf of JCIL.AI. Every item lists what it does, what data it sees, and where the processing happens. We notify B2B customers 30 days before adding or removing a subprocessor that handles their data.
| Service | Purpose | Data received | Region | Policy |
|---|---|---|---|---|
| Anthropic | AI model inference (chat, tools, classification, summarization) | User messages, system prompts, attached images passed to the model | US | View |
| Supabase | Authentication, PostgreSQL database, file storage | Profiles, conversations, messages, memories, billing transactions, uploaded files | US | View |
| Vercel | Application hosting, edge middleware, DNS, Blob storage for uploads | Request metadata, uploaded files | US | View |
| Stripe | Payment processing (subscription and credits) | Name, email, payment method (card numbers never touch JCIL.AI servers) | US | View |
| Resend | Transactional email (welcome, receipts, alerts) | Email address, message content | US | View |
| Upstash | Redis-backed rate limiting | Rate-limit counters keyed by user ID or IP; no message content | US | View |
| Composio | Third-party app connectors (Gmail, Calendar, and others) only when a user connects them | Only what the requested action requires | US | View |
| Sentry | Application error monitoring | Error traces and request metadata | US | View |
Subscribe to subprocessor changes
B2B customers can request 30-day advance notice of any change to this list. Submit your company email through the compliance contact form with topic: subprocessor notifications.
Last updated: April 17, 2026.