Subprocessor List

Version: 1.0

Effective date: February 13th, 2026

1. Slack (Salesforce) - Communication and app integration in Customer workspaces

• Processing: Slack workspace metadata, messages where Service posts/receives content

• Location: as determined by Slack and Customer's Slack settings

2. Make — Workflow automation/scenario execution for request handling

• Processing: payloads necessary to generate outputs; scenario run history may contain Customer Data

• Location: as determined by Make

3. Cloudflare — Worker routing and domain/CDN/security features

• Processing: request routing, logs/analytics as configured
• Location: global processing per Cloudflare network

4. OpenAI — AI inference to generate decision-support output (model: gpt-4.1-mini via API

• Processing: prompts/inputs and outputs for inference
• Location: United States by default unless otherwise configured/available
• Note: Nevorth is not opted into data sharing for training; API data may be retained by OpenAI for limited periods for abuse monitoring unless a zero retention program applies.

5. Stripe — Payments, tax calculation, subscription billing

• Processing: payment and billing data
• Location: primarily US and Ireland per Stripe's setup

6. Webnode — Website hosting/redirection

• Processing: website traffic and basic web logs; not intended to process decision content
• Location: Switzerland/legal HQ; processing locations per Webnode

7. Microsoft 365 — Customer communications (support/legal inboxes)

• Processing: customer support correspondence
• Location: as configured by Microsoft tenant settings