Tous les documents juridiques sont disponibles uniquement en anglais, et seule la version anglaise fait foi.
Traduire avec Google Traductions’ouvre dans un nouvel onglet ; à titre indicatif uniquementThe service providers that process personal data for the Agined Attestor service, what each does and where, and how we give notice of changes.
Last updated November 7, 2026.
The service providers that process personal data for the Agined Attestor service on behalf of Avonao, Inc.. This list is the sub-processor list referred to in the Data Processing Addendum that forms part of the Terms of Service.
In plain language: these are the companies that help us run the Service and handle some of your data. We tell account owners 30 days before we add one.
| Provider | Purpose | Location | Personal data involved | Safeguards |
|---|---|---|---|---|
| Cloudflare, Inc. | Hosting and compute (Workers), databases and key-value storage, object storage (R2, including the SBOMs that sbom.notarize keeps for ten years when you ask for escrow, in a bucket in the workspace's region locked against deletion for those ten years), CDN, DNS, DDoS protection, and the Cloudflare Email service we send transactional email through | Workspace data (watches, quota, and receipts on the Free to Team plans) stored and processed in the workspace's chosen region: US West, US East, Europe Central, Europe West, Europe North, Asia-Pacific or Oceania; the three European regions under Cloudflare's EU jurisdiction (the data stays in the EU; Cloudflare chooses the datacenter). Account data, sign-in, billing records and dashboard: the region the customer chose at sign-up (plus the global edge network for request termination). The public website and documentation (no customer data): United States (US West). See Data regions. | Account data, credentials, receipts and watches, security audit log, operational logs, email address and message content. For the tools: salted subject hashes and the per-workspace salt, passkey public keys and labels of approvers, device public keys, third-party credentials and webhook secrets (stored sealed), and, for mail received at an Agined-hosted inbound.receipt address through Cloudflare Email Routing, the message while it is hashed (only its hash, the envelope sender's hash and the DKIM verdicts are kept); and an escrowed SBOM, which can name the people or suppliers it lists | Standard Contractual Clauses and UK Addendum in Cloudflare's data processing agreement; certified under the EU-US Data Privacy Framework, the UK Extension and the Swiss-US Framework |
| Cloudflare, Inc. (Turnstile) | Bot protection on contact and request forms | United States / global edge | IP address, browser signals, the challenge token | As for Cloudflare above |
| Avonao Billing (operated by Avonao, Inc.) | The centralized billing entity: checkout, subscriptions, invoices, payment methods and the billing portal for every purchase of the Service, with payments processed by Stripe | United States. Avonao Billing is not regional: payments, invoices and tax are handled in the United States | Billing contact and address, tax details, card data (entered at Avonao Billing checkout only), account email, plan and subscription data | Standard Contractual Clauses and UK Addendum |
| Stripe, Inc. / Stripe Payments Europe, Ltd. | Merchant of record and payment processor for every purchase of the Service, processed through Avonao Billing: collects the price, calculates, collects and remits sales tax, VAT and similar taxes, and pays refunds | United States and Ireland, and other locations where Stripe operates. Stripe is not regional: payments, invoices and tax are handled in the United States and the EU | Billing contact and address, tax details, card data (entered at Avonao Billing checkout only), account email, plan and subscription data | Standard Contractual Clauses and UK Addendum in Stripe's data processing agreement |
| Google LLC (analytics) | Website analytics (Google Analytics 4), only after you allow Statistics | United States | Pseudonymous browsing data: cookie identifiers, pages visited, approximate location, browser and device type | Standard Contractual Clauses; certified under the EU-US Data Privacy Framework; consent required before it loads |
| Adobe Inc. (Adobe Fonts) | The typeface of the website's titles, in the EU, EEA, Switzerland and UK only after you allow Fonts; elsewhere directly | United States / global CDN | IP address, the address of the page, browser type | Standard Contractual Clauses in Adobe's data processing terms; Adobe Inc. participates in the EU-US Data Privacy Framework, as Adobe documents; consent required before it loads |
| Amazon Web Services EMEA SARL / Amazon Web Services, Inc. (Amazon Aurora) | Customer data, including receipts, for workspaces on Scale, Enterprise or the isolation add-on, in the AWS region the workspace chose | The AWS region the workspace chose | The customer data of a workspace on the Scale or Enterprise plan or with the isolation add-on, in the workspace's own Amazon Aurora database, including its receipts and everything recorded about them; a workspace's existing receipts move there when it moves to one of these plans or buys the add-on | Standard Contractual Clauses and UK Addendum in the AWS Data Processing Addendum; Amazon Web Services, Inc. participates in the EU-US Data Privacy Framework, the UK Extension and the Swiss-US Framework, as AWS documents |
| Resend, Inc. | Transactional email (billing notices, request acknowledgements), used only as a fallback when Cloudflare Email cannot deliver | United States | Email address, message content | Standard Contractual Clauses in Resend's data processing agreement |
| Anthropic, PBC | The language model behind Number One, the assistant on the website and in the dashboard (Claude Haiku 5.5; Claude Sonnet 5.5 for the dashboard's deeper mode on Team plans and above), and behind our support assistant, ticket triage and summaries | United States. The website assistant receives only what a visitor types. The dashboard assistant reads workspace records only for workspaces in the US data regions, with inference pinned to US infrastructure; workspaces in other regions get documentation answers only | Website: the questions typed into the chat, the page and the language. Support: the text of the ticket or message sent to the assistant. Dashboard: the signed-in customer's questions and, when it looks something up, the records it reads (receipt metadata, usage, monitors, webhooks, key prefixes, team members, plan, support tickets). Never passwords, key secrets or card data | Anthropic's commercial terms and data processing addendum, which include Standard Contractual Clauses; under the commercial terms Anthropic does not train its models on content sent through the API |
| Twilio Inc. | Text-message approvals and voice calls for severity-1 escalations, and the codes that verify a phone number, sent from Agined's Twilio account to numbers a workspace registers | United States | Phone number, message text | Standard Contractual Clauses in Twilio's data protection addendum |
| OpenAI, L.L.C. | Failover language model for Number One, used only when configured and when the primary is unavailable | United States | Conversation content and workspace configuration named in a prompt | Standard Contractual Clauses in OpenAI's data processing addendum |
| Google LLC (Gemini API) | Failover language model for Number One, used only when configured and when the primary is unavailable | United States | Conversation content and workspace configuration named in a prompt | Standard Contractual Clauses in Google's data processing addendum |
| Mistral AI SAS | Failover language model for Number One, used only when configured and when the primary is unavailable | European Union (France) | Conversation content and workspace configuration named in a prompt | EU-established processor; no transfer mechanism required |
Avonao Billing is Avonao's central billing service. Stripe is the merchant of record for payments processed through it. Checkout and the billing portal are Avonao Billing's, and card data is entered there only. We never receive your card number.
You buy and manage your plan in Avonao Billing, which Avonao, Inc. operates. It passes your purchase to Stripe, the merchant of record, and tells the Service your plan, status and renewal date. Avonao, Inc. is the centralized billing entity; Agined has no payment account of its own.
We have no other sub-processors, and we use no sub-processor for advertising or data resale. Our affiliates do not process the Service's personal data.
Some tools fetch public information to observe or check it. The services below receive a request from us for public data, such as a domain name, a package name or a randomness round. We send them no Customer Personal Data, so they are not sub-processors, but we list them so you can see where requests go.
| Source | Used by | What we ask for |
|---|---|---|
Public DNS resolvers (Cloudflare 1.1.1.1 and cloudflare-dns.com, and the resolvers you choose for a watch) | dns.watch, email.dkim_notarize, inbound.receipt, control.snapshot, posture.watch | DNS records for the name being checked |
| IANA RDAP bootstrap and the domain's RDAP registry | rdap.watch | The registration record for the domain |
| npm, PyPI, crates.io, Docker Hub, GitHub Container Registry | registry.watch | Public metadata for the package or image |
| Hugging Face hub | model.attest, only when you name a repository | Public file listing for the repository revision |
| drand (League of Entropy) public endpoints | draw.fair | The public randomness for one round |
The public data feeds api.witness offers as presets, such as the European Central Bank's reference exchange rates | api.witness | The feed itself |
| The issuer key URL of a mandate, and the key directory of a signed bot request | mandate.witness, botauth.verify | The public keys |
| Any URL, host or domain you name | The relay, watch and capture tools | What that tool's documentation says it requests |
The destination of a relayed call or a webhook delivery is chosen by you and receives what you send it; it is your recipient, not our sub-processor.
| Provider | Purpose | Location | Personal data involved | Safeguards |
|---|---|---|---|---|
| Avonao ID (operated by Avonao, Inc.) | Sole identity provider for sign-up and sign-in to the Service; the Service holds no sign-in methods of its own. Whatever sign-in methods you use at Avonao ID (including any third-party account you connect there), it, not the Service, receives and keeps them. It collects and keeps your email addresses, name, sign-in methods, security log, country and age confirmation (minimum age 16) | The data region of the member's Avonao ID account (one of seven), with some records in its home region, US West. Avonao ID is only an identity provider: it holds no Agined customer data other than the platform connection and, if reported, the plan tier (free/paid) | To the Service: your Avonao ID identifier, confirmed email address, name and language (and an earlier user id if your account was migrated). From the Service: whether your subscription is none, free or paid, its renewal date and a link to manage it; no prices or billing data | Both are operated by Avonao, Inc.; the transfer safeguards for data in each service are in the privacy policies of the Service and of Avonao ID |
Avonao ID is an independent controller for the account data it holds. It is not our processor for that data, and it processes no Customer Personal Data for the Service. Avonao ID's own service providers are named in its privacy policy (Cloudflare and Microsoft 365 are live; Stripe, Google and analytics and monitoring tools are marked Planned). They are not listed in section 2 unless they also process Customer Personal Data for the Service.
We authorize these sub-processors generally, and we may add or replace one. The process is:
Our obligations to our sub-processors mirror our obligations to you, and we stay responsible for them.