Sub-processors

Who helps Azygos operate.

This operational inventory was last reconciled on July 16, 2026. A listed configured integration does not mean its public feature is enabled; rows marked pending still require legal confirmation before a launch claim or procurement approval.

Supabase Inc.

Purpose: Database, authentication, file storage
Data: All in-app data
Region: US
Reviewed: 2026-05-13
Transfer mechanism: UK IDTA / EU SCCs

Deepgram Inc.

Purpose: Audio transcription
Data: Voice clips
Region: US
Reviewed: 2026-05-13
Transfer mechanism: UK IDTA / EU SCCs

Google LLC

Purpose: AI text generation, image analysis, Health Connect, Play Store
Data: Prompts, media, optional OS data, purchase records
Region: US / device
Reviewed: 2026-05-13
Transfer mechanism: UK IDTA / EU SCCs; device-local where applicable

Anthropic, PBC

Purpose: Claude AI for Vault summarisation
Data: Explicitly submitted Vault content
Region: US
Reviewed: 2026-05-13
Transfer mechanism: UK IDTA / EU SCCs

OpenRouter, Inc.

Purpose: AI gateway
Data: AI prompts routed to selected vendors
Region: US
Reviewed: 2026-05-13
Transfer mechanism: UK IDTA / EU SCCs

RevenueCat Inc.

Purpose: Subscription state and purchase tokens
Data: Email, user ID, purchase metadata
Region: US
Reviewed: 2026-05-13
Transfer mechanism: UK IDTA / EU SCCs

Functional Software, Inc. (Sentry)

Purpose: Crash and error monitoring
Data: Scrubbed diagnostics
Region: US
Reviewed: 2026-05-13
Transfer mechanism: UK IDTA / EU SCCs

Apple Inc.

Purpose: HealthKit and App Store
Data: Optional OS data and purchase records
Region: Device / Apple
Reviewed: 2026-05-13
Transfer mechanism: Apple terms; device-local where applicable

Mixpanel, Inc.

Purpose: Product analytics
Data: Product-interaction events; no health data; IP/device identifiers minimized where enabled
Region: US
Reviewed: 2026-06-20
Transfer mechanism: UK IDTA / EU SCCs

Resend, Inc.

Purpose: Transactional email, approved marketing email transport, delivery webhooks
Data: Email address, message metadata, delivery events, unsubscribe preferences; no health data for marketing campaigns
Region: US / global email network
Reviewed: 2026-06-20
Transfer mechanism: UK IDTA / EU SCCs

Cloudflare, Inc.

Purpose: Website delivery, edge security, bot protection, and Turnstile
Data: Request and diagnostic metadata, IP address, browser and challenge signals
Region: Global edge network / US
Reviewed: 2026-07-16
Transfer mechanism: Cloudflare DPA and applicable transfer safeguards; legal review pending

Stripe (contracting entity depends on the Azygos account)

Purpose: Configured professional billing and payment infrastructure; public self-serve and marketplace checkout are currently gated
Data: Professional contact, billing, transaction, refund, and dispute metadata only when an approved Stripe flow is enabled
Region: US / EEA / global payment network
Reviewed: 2026-07-16
Transfer mechanism: Stripe DPA and applicable transfer safeguards; contracting-entity review pending

VendorPurposeDataRegionTransferReviewed

Supabase Inc.Database, authentication, file storageAll in-app dataUSUK IDTA / EU SCCs2026-05-13

Deepgram Inc.Audio transcriptionVoice clipsUSUK IDTA / EU SCCs2026-05-13

Google LLCAI text generation, image analysis, Health Connect, Play StorePrompts, media, optional OS data, purchase recordsUS / deviceUK IDTA / EU SCCs; device-local where applicable2026-05-13

Anthropic, PBCClaude AI for Vault summarisationExplicitly submitted Vault contentUSUK IDTA / EU SCCs2026-05-13

OpenRouter, Inc.AI gatewayAI prompts routed to selected vendorsUSUK IDTA / EU SCCs2026-05-13

RevenueCat Inc.Subscription state and purchase tokensEmail, user ID, purchase metadataUSUK IDTA / EU SCCs2026-05-13

Functional Software, Inc. (Sentry)Crash and error monitoringScrubbed diagnosticsUSUK IDTA / EU SCCs2026-05-13

Apple Inc.HealthKit and App StoreOptional OS data and purchase recordsDevice / AppleApple terms; device-local where applicable2026-05-13

Mixpanel, Inc.Product analyticsProduct-interaction events; no health data; IP/device identifiers minimized where enabledUSUK IDTA / EU SCCs2026-06-20

Resend, Inc.Transactional email, approved marketing email transport, delivery webhooksEmail address, message metadata, delivery events, unsubscribe preferences; no health data for marketing campaignsUS / global email networkUK IDTA / EU SCCs2026-06-20

Cloudflare, Inc.Website delivery, edge security, bot protection, and TurnstileRequest and diagnostic metadata, IP address, browser and challenge signalsGlobal edge network / USCloudflare DPA and applicable transfer safeguards; legal review pending2026-07-16

Stripe (contracting entity depends on the Azygos account)Configured professional billing and payment infrastructure; public self-serve and marketplace checkout are currently gatedProfessional contact, billing, transaction, refund, and dispute metadata only when an approved Stripe flow is enabledUS / EEA / global payment networkStripe DPA and applicable transfer safeguards; contracting-entity review pending2026-07-16

To subscribe to sub-processor changes, email privacy@azygos.app with the subject line "subscribe sub-processor changes". We will email subscribers before adding a new sub-processor where required by the policy. Data Processing Agreements, processor terms, or redacted transfer summaries are available for qualified privacy or enterprise reviews where they are not public.