Sub-processors
Draft for counsel review — not legal advice. Last updated 2026-06-22.
A deliberately short list. Your documents, queries, and model prompts are processed by Stratum in your own cloud and never reach us — so almost no third party touches your content.
| Sub-processor | Purpose | Data | Location |
|---|---|---|---|
| Cloudflare | Hosts the site + control-plane edge | Static assets; structural telemetry in transit | US / global edge |
| Google Cloud (BigQuery) | Stores the structural telemetry stream | Counters, timestamps, install_id, salted user id — no content | Configurable region |
| Email / support | Operational + support email | Email of users who contact support | US/EU |
Not sub-processors
- Your LLM provider (Anthropic / OpenAI / Google / Bedrock) — under bring-your-own-key, dispatch is direct to the provider from your cloud. The provider is your sub-processor, not ours.
- Your cloud provider (GCP / AWS / Azure) running Stratum — your own infrastructure, not ours.
We give 30 days' notice before adding or replacing a sub-processor. See the DPA for the full terms.
home · trust center · DPA