Changes to AI vendors’ sub-processor lists and DPAs, word for word.

Added: AWS | Data storage and diagnostics Infrastructure, Cloud service provider, including AI services for intelligence features | Multiple worldwide |

Added: Google | Infrastructure; Cloud service provider; including AI services for intelligence features; Email and office applications | For more information on GCP and its sub-processors, including locations, please see [https://cloud.google.com/…

Added: Salesforce Service Cloud and Agentforce | Management of customer support tickets | USA |

Added: Anthropic Claude | Support | Multiple Worldwide |

Added: Business-related information or datasets that Customer or its authorized users submits , or connects, to the Cloud Service.

Removed: A. Dataiku Cloud Subprocessors

Removed: B. Dataiku Private Cluster Subprocessors (applicable only where Customer has purchased the Private Cluster for Dataiku Cloud Enterprise AI add-on):

Removed: **Subprocessor Name** | **Purpose** | **Subprocessor Location** |

Added: LevelBlue, LLC and Affiliates | Managed security, detection and response, and incident response services, and related professional services | 6010 West Spring Creek Pkwy, Plano, TX 75024 | Australia, Canada, Costa Rica, Czech Republic, Indi…

Added: Compute Providers• Cloud Compute

Added: Global

Added: [https://trust.baseten.co/resources?s=6klpur4mtmiu63u3ufex1&name=baseten-cloud-compute-providers.pdf](https://trust.baseten.co/resources?s=6klpur4mtmiu63u3ufex1&name=baseten-cloud-compute-providers.pdf)Opens in new tab

Added: Compute Providers

Added: In the course of providing the Services to Customer pursuant to the Agreement, Insider One may Process Personal Data on behalf of Customer, and the Parties agree to comply with the following provisions with respect to any Personal Data, eac…

Added: **“AI Act”** means Regulation (EU) 2024/1689 of the European Parliament and of the Council of 13 June 2024 laying down harmonised rules on artificial intelligence (Artificial Intelligence Act), as amended from time to time; and “Provider” a…

Added: **“Personal Data”** means any information relating to an identified or identifiable natural person where such data is Customer Data.

Added: **2.1 Details of the Processing.** The parties acknowledge and agree that with regard to the Processing of Personal Data, Customer is the Controller, Insider One is the Processor and that Insider One or its Affiliates engaged in the Process…

Added: Posted Date: October 9, 2026

Added: Baseten | Artificial intelligence provider | USA |

Removed: Posted Date: September 5, 2026

Removed: Pinecone | Vector database for search features | USA |

Added: US, EU

Added: US, EU

Added: US, EU

Added: Applied Compute, Inc• Model Inference Service

Added: Fireworks• Inference Provider

Added: CoreWeave

Added: Inference infrastructure provider for hosting and serving first party AI models.

Added: US

Added: Amazon Web Services, Inc. | Applicable Cloud Products Atlas Atlassian Guard (Access/Guard family) Bitbucket Cloud (including Bitbucket Pipelines) Compass Confluence Cloud Data Lake Insights Jira Align Jira Cloud (including Jira Software and…

Added: Clumio, Inc. | Applicable Cloud Products Atlas Atlassian Guard (Access/Guard family) Bitbucket Cloud (including Bitbucket Pipelines) Compass Confluence Cloud Data Lake Insights Jira Align Jira Cloud (including Jira Software and Jira Work Ma…

Added: Cloudflare, Ltd. | Applicable Cloud Products Atlas Atlassian Guard (Access/Guard family) Bitbucket Cloud (including Bitbucket Pipelines) Compass Confluence Cloud Data Lake Insights Jira Align Jira Cloud (including Jira Software and Jira Wor…

Added: e-Core Soluções em Tecnologia da Informaçiupão Ltda. | Applicable Cloud Products Atlas Atlassian Guard (Access/Guard family) Bitbucket Cloud (including Bitbucket Pipelines) Compass Confluence Cloud Data Lake Insights Jira Align Jira Cloud (…

Added: ElevenLabs leverages its affiliates in connection with providing Services to its customers. These affiliates include Eleven Labs Ltd. (UK), Eleven Labs Poland Sp. z o.o (Poland), Eleven Labs Japan Godo Kaisha (Japan), Eleven Labs Tech Middl…

Added: Amazon Web Services

Added: ElevenLabs leverages its affiliates in connection with providing Services to its customers. These affiliates include Eleven Labs Ltd. (UK), Eleven Labs Poland Sp. z o.o (Poland), Eleven Labs Japan Godo Kaisha (Japan), Eleven Labs Tech Middl…

Added: Amazon Web Services

Added: Customer applications, databases and platform infrastructure. Services: Google Kubernetes Engine, Cloud Run, Spanner, Cloud KMS, Vertex AI

Added: EU (Netherlands, europe-west4)

Added: Customer applications, databases, file storage and AI model inference. Services: S3, SES, Bedrock

Added: UK (London, eu-west-2) for storage, cache and secrets. US (Oregon, us-west-2) for Bedrock.

Added: TypeSafe AI

Added: Provider of proprietary AI models via API.

Added: Inference Provider

Added: US

Added: Silverhand Inc. (Logto)

Added: Identity and Access Management

Added: Provides customer identity services, including user login, authentication, and user management for the LandingAI platform.

Added: * **Logto's Subprocessors:**[List](https://trust.logto.io/subprocessors)Opens in new tab

Added: Stripe

Added: Payment Processing

Added: Payment processing. Processes customer billing and payment data.

Removed: Atlassian SSO (Jira + Confluence)

Removed: Snowflake Inc. | Snowflake is an analytic data warehouse provided as Software-as-a-Service (SaaS). The service is used by Freshworks to provide the ability to support dynamic and on-the-go reporting and analytics features in its products. |…

Removed: Adora

Removed: Data analytics

Removed: US

Removed: https://www.adora.so/

Removed: OWND ApS (ParaHelp)

Removed: ParaHelp provides AI based automated support, for faster first line support resolutions. (Opt-in basis for Enterprise).

Removed: Customer support

Removed: US

Added: Baseten

Added: baseten.co

Removed: Exa

Removed: LLM search service

Added: # Insider One Sub-Processors (Public Version)

Added: Version | v3.0 |

Added: 46 sub-processor entries listed

Added: Sosyo Plus Bilgi Bilişim Teknolojileri Danışmanlık Hizmetleri Ticaret A.Ş. – Sucursal en España | Avenida Diagonal 442, 3º 1ª, 08037 Barcelona, Spain | Customer success and commercial operations for Iberian Customers. |

Added: Andromeda Cluster, Inc.

Added: Civo Limited

Added: ORNN AI INC.

Added: ornn.com

Added: Lambda

Added: Cloud Compute

Added: Global

Added: lambda.ai

Added: - India

Added: - India

Added: - Adobe Analytics

Added: Google (Alphabet)

Added: Nebius

Added: Inference infrastructure provider for hosting and serving first party AI models.

Added: Inference Provider

Added: UK

Added: ### **1. Definitions**[](#1-definitions)

Added: ### **2. Scope**[](#2-scope)

Added: ### **3. Roles of the Parties**[](#3-roles-of-the-parties)

Added: **3.1. Roles**. The Parties acknowledge and agree that with regard to the Processing of Customer Personal Data: (a) Baseten acts as a Processor; (b) Customer acts as a Controller, or as a Processor on behalf of its own controllers; and (c) …

Added: [Contact support](https://www.notion.com/help)[Report a vulnerability](mailto:security@makenotion.com?subject=Vulnerability%20Report)

Added: [Contact support](https://www.notion.com/help)[Report a vulnerability](mailto:security@makenotion.com?subject=Vulnerability%20Report)

Added: What is a Subprocessor?

Added: In order to provide our Services, Notion engages the Subprocessors listed in the tables below. A Subprocessor is a third-party engaged by Notion Labs, Inc., and its applicable Affiliates, to process Customer Personal Data. Capitalized terms…

Added: Databricks

Added: Large Language Model Inference Service

Added: Model Inference Service

Added: USA, EU

Added: Defmacro Software DMCC (“ClearTax”) | RET-R6-009, Plot No: JLT-PH2-RET-R6 Jumeirah Lake Towers, Dubai, UAE Data Centers: France, UAE | E-invoicing services to authorized invoice networks on behalf of HighRadius’s clients. For the Electronic…

Added: Eleven Labs Inc. | 169 Madison Ave #2484 New York, NY 10016, USA Data Centers: USA | Voice AI engine for autonomous inbound and outbound calling agents in HighRadius Autonomous Collections module. | Autonomous Collections |

Added: ZenDesk, Inc. | Customer support tool |

Added: ### Horizon Scanning→

Added: Track, assess, and take action on regulatory changes.

Added: - [Horizon Scanning

Added: Track, assess, and take action on regulatory changes.

Added: Microsoft Azure | Cloud service provider | Microsoft Azure, 1 Microsoft Way, Redmond, WA 98052, USA | EU (e.g., Germany, Sweden) |

Added: Google Enterprise Agent Platform | AI provider | Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, United States | EU, US |

Added: Modal Labs, Inc. | AI inference provider | Delaware, USA | US |

Added: Baseten Labs, Inc. | Inference infrastructure provider | 201 Spear St, Suite 1600, San Francisco, CA 94105, USA | EU |

Removed: Vercel

Removed: https://vercel.com/

Removed: Deployment backend for customer apps

Removed: US

Added: TypeSafe AI

Added: Engineering

Added: US

Added: typesafe.ai

Added: Service provider for AI agents, hosting large language models and embeddings, and for abuse prevention.

Added: Service provider for AI agents, hosting large language models and embeddings, and for abuse prevention.

Added: Google LLC · Global

Added: Service provider for hosting large language models and embeddings and for abuse prevention.

Added: ### Weaviate Group Entities (Intra-Group Subprocessors)[​](#weaviate-group-entities-intra-group-subprocessors)

Added: Where the Weaviate entity contracting with the customer is an affiliate of the entity operating the platform, the operating entity acts as an intra-group subprocessor.

Added: Category | Entity | Subprocessing Activities | Location |

Added: Affiliate | Weaviate B.V. | Operation of the Weaviate Cloud platform and customer support on behalf of affiliate contracting entities (e.g., Weaviate, LLC) | Amsterdam, The Netherlands |

Added: Baseten Labs, Inc. (*Effective October 16, 2026*) | AI Service Provider | HubSpot AI | United States | European Economic Area regions | United States | United States |

Added: Bright Data Ltd. (*Effective October 16, 2026*) | Web Search Results | HubSpot AI | United States | United States | United States | United States |

Added: Exa Labs, Inc. (*Effective October 16, 2026*) | Web Search Results | HubSpot AI | United States | United States | United States | United States |

Added: Stripe, Inc. | Payment Processor | Support Revenue Hub products and services | United States | United States | United States | United States |

Added: USA, EU

Added: USA, EU

Added: USA, EU

Added: USA, EU

Added: Nebius AI Cloud Sub-processors

Added: AI Cloud sub-processors

Added: Token Factory sub-processors

Added: Token Factory Terms

Added: IntouchCX Inc. | Canada | Customer support |

Added: Persona Identities, Inc. | USA | Identity verification |

Added: Full-stack visibility for rapid de-bugging and better UX

Added: Full-stack visibility for rapid de-bugging and better UX

Removed: Monitor mobile app performance end to end

Removed: Monitor mobile app performance end to end

Added: SideGuide Technologies, Inc. d/b/a Firecrawl |

Added: USA |

Added: Web data extraction for AI applications |

Removed: FingerprintJS, Inc.Account Fraud/Takeover Prevention US[support@fingerprint.com](mailto:support@fingerprint.com)

Added: "Inference Provider" means a third-party provider of speech-to-text, text-to-speech, language, or other machine-learning model services that LiveKit engages as a Sub-processor to process Inference Data in connection with LiveKit Inference.

Added: "LiveKit Inference" means the LiveKit-managed gateway through which Customer may access models operated by Inference Providers.

Added: "Services" means the products and services provided by LiveKit or its Affiliates, as applicable, that are (a) used by Customer, including, without limitation, products and services that are on a trial basis or otherwise free of charge or (b…

Added: b. If Customer is a Processor on behalf of a Third-Party Controller, then Customer: is the single point of contact for LiveKit; must obtain all necessary authorizations from such Third-Party Controller; and undertakes to issue all instructi…

Removed: Elevenlabs | Model inference | United States |

Added: **SpaceXAI LLC****Artificial Intelligence, machine learning United States of America

Added: **Effective October 5, 2026. Note, the effective date may differ based on the specific terms of your agreement with Box.