Sub-processors
Sub-processors
Updated 2026-10-14. Third parties that may process customer data on our behalf. AI-provider rows apply only if your organization chose that provider; we never route your prompts to a provider you did not configure.
Infrastructure
| Provider | Purpose | Data | Location |
|---|---|---|---|
| Cloudflare, Inc. | Hosting (Workers), database (D1), cache (KV), vector index (Vectorize), Workers AI, TLS, DNS | All backend data described in the Privacy Policy; prompts in transit | Global edge; data at rest in Cloudflare's US/EU regions |
| Resend | Transactional email (sign-in, invitations, gap-report updates) | Email address, name, message content | US |
| Stripe | Billing | Billing contact, payment details (held by Stripe) | US |
| GitHub (Microsoft) | Private issue tracker for redacted gap reports; hosting of organizations' published skills | Redacted report text; skill files you publish | US |
AI model providers (customer-selected)
| Provider | When used | Zero-data-retention | Notes |
|---|---|---|---|
| Anthropic | If you configure an Anthropic key | API traffic not used for training; retention per Anthropic's API terms (ZDR available on request from Anthropic) | Prompt caching used; no persistence by us |
| OpenAI / Azure OpenAI | If configured | API data not used for training; 30-day abuse retention unless ZDR approved (OpenAI) / Azure data residency per your deployment | |
| Google (Gemini) | If configured | Per Google Cloud / AI Studio API terms | |
| OpenRouter | If configured | Honours per-model ZDR flags; Marlow respects the catalog's retention metadata | Gateway to many underlying providers |
| Vercel AI Gateway | If configured | Marlow honours ZDR flags exposed by the gateway | Gateway to many underlying providers |
| Cloudflare Workers AI | Always, for conversation-memory summaries and context compaction (falls back to your provider if unavailable) | Cloudflare does not retain inputs/outputs for Workers AI inference | Platform-paid; keeps summarisation off your key |
Optional, admin-enabled
| Provider | Purpose | Data | Gate |
|---|---|---|---|
| Firecrawl | Web research / read URL | Search queries and public URLs, scrubbed of sys_ids, record numbers, emails and hostnames | Off until an org admin enables it |
| Tavily | Web search | Scrubbed search queries | Off until an org admin enables it; requires a key |
To be notified of changes to this list, email security@instancegenie.ai with the subject "sub-processor updates".