Sub-processors

This is the developer-facing sub-processor list. The public, dated, evidence- grade version lives at trust.claresia.com/subprocessors.

We provide 14-day notice before adding any new sub-processor and 90-day notice for sub-processors that would process customer Hub records.

Cloud infrastructure

Vendor	Role	Region	DPA in place
AWS	Compute, Postgres (Aurora), KMS, S3, IAM	eu-south-1, eu-central-1, eu-central-1, eu-west-1, ap-southeast-1 (planned)	✅
Microsoft Azure	Compute, Postgres, Key Vault, Blob (Mode B/C BYOC support)	Multi-region	✅
Google Cloud	Compute, Cloud SQL, KMS, GCS (Mode C BYOC support)	Multi-region	✅

Identity

Vendor	Role	Region	DPA in place
WorkOS	SSO (SAML / OIDC) abstraction, SCIM directory, audit log	eu-south-1, eu-west-1	✅

LLM providers (zero-retention)

These vendors only process data when the customer’s LLM platform passes a request through them. Claresia does not store customer prompts or completions. All operate under zero-retention terms.

Vendor	LLM family	DPA / TOM in place
Anthropic	Claude (Sonnet, Haiku, Opus)	✅ + zero-retention
Microsoft (OpenAI partnership)	Copilot M365 (GPT family)	✅ + zero-retention
OpenAI	ChatGPT Enterprise	✅ + zero-retention
Google	Gemini for Workspace	✅ + zero-retention

Observability + ops

Vendor	Role	Region	DPA in place
Honeycomb	Distributed tracing	eu-central-1	✅
Datadog (alternate)	Metrics + logs	eu-south-1, eu-west-1	✅
PagerDuty	On-call paging	eu-south-1	✅
Atlassian Statuspage (or Instatus)	status.claresia.com hosting	Various	✅

Compliance + governance tooling

Vendor	Role	Region	DPA in place
Vanta (or Drata)	Continuous SOC 2 monitoring	eu-central-1	✅
Schellman / Prescient	SOC 2 audit firm	us-only	NDA + engagement letter
Cure53 / Bishop Fox (Q2 2026)	Pen test firm	EU + US	NDA + SOW
Bugcrowd / Intigriti (Q3 2026)	Bug bounty platform	eu-south-1	✅

Customer success + ops

Vendor	Role	Region	DPA in place
Slack	Slack/Teams Connect channels with customers	eu-south-1, eu-west-1	✅
HubSpot	CRM (customer record)	eu-south-1 (Milano), eu-central-1 (Frankfurt)	✅
Zendesk (or Intercom)	Support ticketing	Various	✅
DocuSign	Contract signature	Various	✅
Stripe	Billing	eu-south-1, eu-west-1	✅

Email + comms

Vendor	Role	Region	DPA in place
AWS SES (or SendGrid)	Transactional email	eu-south-1	✅
Postmark (alternate)	Email backup	eu-south-1	✅

Sub-processor change notification

You will be notified by:

Email to your tenant’s compliance-contacts list (set in Command Center → Settings → Contacts)
Trust Center digest quarterly (and ad-hoc for changes)
Status banner in Command Center for 14+ days

If you object to a new sub-processor, you have 30 days to notify us in writing (compliance@claresia.com). We will work with you to find an alternative or to move you to a deployment mode that doesn’t use the new sub-processor (e.g., Mode C BYOC removes most data-plane sub-processors).

Affiliate / contractor disclosure

Claresia GmbH (EU entity, eu-central-1 operations) — affiliate of Claresia Inc.
Claresia Engineering Lda (Lisbon, EU support team) — affiliate
All affiliates operate under the same DPA + technical and organizational measures

Customer-specific sub-processors

For Mode C BYOC, the customer’s own Postgres / SharePoint / Snowflake tenant is the data plane and not a Claresia sub-processor — it’s customer- owned infrastructure. Claresia operates only the control plane components listed above.

Validation

The sub-processor list at trust.claresia.com/subprocessors is the canonical source. This developer-facing page is updated within 7 days of any change. If you see a discrepancy, email compliance@claresia.com.