Sub-processors
Last updated .
AI Consultory uses these organisations to run aiconsultory.com and the client workspace. We remain the controller for website enquiries and workspace accounts. Paid programme contracts may name additional processors for that engagement.
Change notification
We will update this page when the list changes. For a new processor that will receive personal data, we will also email existing workspace contacts at least 30 days before the change, except where we must replace a processor immediately to contain a security incident. Questions: aiconsultory@outlook.com.
Current list
Vercel
In use
Website hosting, serverless functions, and cookieless analytics.
Location: Functions pinned to London (lhr1). The platform operator is in the United States.
Data: Request metadata, workspace session handling, and cookieless traffic figures.
Neon
In use
Postgres database for workspace accounts, programmes, and audit events.
Location: AWS eu-west-2 (London).
Data: Work email, organisation name, programme intake, task progress, and security audit records.
Resend
In use
Transactional email for magic-link sign-in and contact-form delivery.
Location: United States.
Data: Email address, sign-in link, and the contents of an enquiry.
Microsoft
In use
Outlook mailbox for the published contact address.
Location: Microsoft cloud (region determined by the Outlook account).
Data: Name, email, company, and message when someone emails or we reply.
OpenAI
Not in use unless enabled
Site assistant replies only.
Location: United States.
Data: Text typed into the site assistant. The assistant is off unless we switch it on.
Not on this list yet
We have not added Upstash, Stripe, or an object-storage provider. If we do, they will appear here before they receive personal data.