Subprocessor List

Last Updated: May 2026

The following subprocessors are engaged by PartnerAPI to process personal data on behalf of our customers. All subprocessors are bound by written data processing agreements.

<!-- SUBPROCESSORS:START (auto-generated from docs/gdpr/subprocessors.yaml — run pnpm subprocessors:generate after editing the YAML) -->

Infrastructure & Hosting

SubprocessorPurposeLocationTransfer Mechanism
AWS (S3, SES)Object storage, email deliveryEU (eu-west-1, eu-north-1)N/A (EU)

Monitoring & Observability

SubprocessorPurposeLocationTransfer Mechanism
SentryError tracking and monitoringEU (Frankfurt)N/A (EU)
Grafana Cloud (Loki)Log storage and queryingEUSCCs

AI & Machine Learning

SubprocessorPurposeLocationTransfer Mechanism
OpenAIAI embedding generation, inference, and content moderation (partner-uploaded RAG document chunks)USSCCs + DPA
Chroma Inc. (Chroma Cloud)Vector embedding storage for tenant document content (per-tenant collections used for AI knowledge retrieval)USSCCs + DPA (DPA review pending)

Communications

SubprocessorPurposeLocationTransfer Mechanism
MailjetTransactional email deliveryEU (France)N/A (EU)

Billing & Payments

SubprocessorPurposeLocationTransfer Mechanism
StripePayment processing and billingUS/EUSCCs + DPA

Identity & Integrations

SubprocessorPurposeLocationTransfer Mechanism
Atlassian (Confluence + OAuth)OAuth identity provider; Confluence page content ingestion when the Controller enables the Confluence integrationUSSCCs (DPA review pending)
<!-- SUBPROCESSORS:END -->

Changes to This List

We will notify customers of any changes to our subprocessor list at least 30 days before a new subprocessor begins processing personal data. Customers may object to the appointment of a new subprocessor as outlined in our Data Processing Agreement.

Contact

For questions about our subprocessors, contact us at:

© 2026 PartnerAPI.com. All rights reserved.