Sub-processors
To deliver NeuroGen, we rely on a small set of trusted third-party service providers ("sub-processors") that may process personal data on our behalf. We maintain this list in the interest of transparency and to meet our obligations under GDPR Article 28 and comparable laws.
| Sub-processor | Purpose | Data categories | Location | Transfer mechanism |
|---|---|---|---|---|
| Akamai / Linode | Application & database hosting (primary infrastructure) | All service data at rest | United States | Domestic (US) — no transfer |
| Stripe | Payment processing & subscription billing | Billing contact, payment metadata (card data handled by Stripe; we never store it) | United States | SCCs / Stripe DPA |
| PayPal | Alternative payment processing | Billing contact, transaction metadata | United States | SCCs / PayPal DPA |
| Twilio | SMS, voice, and messaging delivery | Phone numbers, message/call content & metadata | United States | SCCs / Twilio DPA |
| ElevenLabs | Text-to-speech & voice generation | Text submitted for synthesis, voice samples (if provided) | United States | SCCs / DPA |
| OpenAI | AI model inference for generation & analysis features | Prompts and content you submit to AI features | United States | SCCs / OpenAI DPA (zero-retention API tier where applicable) |
| Anthropic | AI model inference for generation & analysis features | Prompts and content you submit to AI features | United States | SCCs / Anthropic DPA |
| xAI | AI model inference for generation & analysis features (selected routing) | Prompts and content you submit to AI features | United States | SCCs / xAI DPA |
| Zhipu AI (Z.AI / GLM)Cross-border | AI model inference (failover / selected routing) | Prompts and content you submit to AI features | China | Standard Contractual Clauses + transfer risk assessment; explicit notice. See note below. |
| OAuth sign-in and connected-account APIs (Gmail, Drive, Calendar) when you connect them | Account identity + the specific Google data you authorize | United States | SCCs / Google DPA | |
| SendGrid / SMTP email providers | Transactional & marketing email delivery | Recipient email addresses, message content | United States | SCCs / DPA |
| Slack | Optional Slack integration & notifications you enable | Messages/notifications you route to Slack | United States | SCCs / Slack DPA |
| Firecrawl | Web content retrieval for research features | URLs you submit for scraping/analysis | United States | SCCs / DPA |
| Sentry | Error monitoring & application diagnostics | Diagnostic event data (scrubbed of secrets) | United States | SCCs / Sentry DPA |
Cross-border transfer to China (Zhipu AI)
Some AI features may route requests to Zhipu AI (Z.AI / GLM), whose infrastructure is located in China, as a failover or for selected model routing. This constitutes a cross-border transfer of the content you submit to those AI features. We rely on Standard Contractual Clauses and a transfer risk assessment for this processing. If you prefer that your data never be processed by this sub-processor, contact us — enterprise routing controls are available.
AI-provider processing
Content you submit to AI features is sent to the applicable AI sub-processor solely to generate your result. We present AI capabilities to you as service tiers (Fast / Standard / Premium); the providers above are the underlying processors and are named here for transparency and legal disclosure.
Your rights & agreements
See our Privacy Policy for how we handle personal data and your rights, and our Data Processing Agreement for the terms governing our processing on your behalf. Questions about sub-processors: support@neurogen.cc.