Sub-processors
Aurelius uses the following third-party service providers ("sub-processors") to deliver the Service. Each is bound by contractual confidentiality and data-protection obligations.
Current sub-processors
| Sub-processor | Purpose | Data accessed | Region |
|---|---|---|---|
| Anthropic, PBC | Large-language-model inference (Claude) | User prompts, attachments, conversation context at inference time. Not used for model training under commercial terms. | United States |
| Turso Database, Inc. | Database hosting (libSQL) | All account data, conversations, payment records, security log | [TURSO_REGION] |
| Vercel, Inc. | Application hosting, edge CDN, function execution | All HTTP traffic, request logs, function invocations | Global edge network |
| Stripe, Inc. | Payment processing | Card details (processed directly by Stripe; never seen by us), billing email, transaction metadata | United States / European Union |
| Resend, Inc. | Transactional email delivery | Recipient email address, message contents | United States |
| Google LLC | Google OAuth (Sign in with Google), optional | Verified email address, name, avatar (only if user chooses Google sign-in) | United States |
| Cloudflare, Inc. | DNS, edge security, optional email routing | HTTP metadata, DNS queries | Global |
| jsDelivr (Prospect One) | Static asset CDN for client-side libraries (marked, DOMPurify, Prism) | Visitor IP at script-fetch time. Not used for analytics. | Global |
Changes to sub-processors
We update this page whenever a sub-processor changes. For sub-processors that handle personal data, we provide at least 30 days advance notice via email to active users before the new sub-processor goes into production. If you object to a new sub-processor, your remedy is to close your account before the change takes effect, you will receive a refund of any unused credits under our Refund Policy.
Change history
| Date | Change |
|---|---|
| 2026-05-22 | Initial sub-processor list published. |
Contact
Questions about sub-processors: privacy@[DOMAIN]
Operator placeholders [LIKE_THIS] must be filled in before publication. This page is part of our Privacy Policy commitments.