Sub-processors
How to read this list
This inventory discloses the providers that may receive customer data when the related feature is configured or used. A provider being listed does not mean it is active for your workspace. Many are optional and only engage when you enable the corresponding feature. Aldwin commits to at least 30 days' notice before adding a new material sub-processor.
Core and feature sub-processors
| Provider | Purpose | Data that may be sent | Activation |
|---|---|---|---|
| Anthropic | AI analysis, planning, content generation, and web research | User prompts, selected workspace context, marketing data, generated output, research queries | Core AI path |
| OpenAI | Audio transcription, image generation, fallback embeddings | Submitted audio, image prompts and references, text selected for embedding | Optional, configuration-gated |
| Voyage AI | Embedding generation for semantic retrieval | User queries and selected workspace, knowledge, or memory text | Optional, configuration-gated |
| Clerk | Authentication and session management | User identity, email, name, authentication and session metadata | Core identity path |
| Railway | Application, worker, Redis, PostgreSQL/pgvector, and runtime hosting | Application data, database content, job payloads, logs, queue and cache state, operational metadata | Core infrastructure |
| Vercel | Frontend hosting and delivery | Delivery metadata and frontend traffic | Core frontend infrastructure |
| Cloudflare | R2 object storage for uploaded and generated assets | Uploaded files, generated media, exports, object metadata | Core storage |
| Convex | Real-time browser projections for work, asset, membership, and status updates | Workspace and user identifiers, messages or status data for enabled real-time features | Optional, configuration-gated |
| Sentry | Error and crash diagnostics | Scrubbed error, request, user, and runtime metadata | Optional, environment-gated |
| Stripe | Billing and payment processing | Billing contact, subscription, invoice, and payment metadata | Billing path |
| Resend | Transactional email delivery | Recipient email, message content, delivery metadata | Configuration-gated |
| Slack | Customer-authorized messaging integration | Workspace, user, channel, message, and connector metadata for enabled workflows | Optional, customer-authorized |
| Twilio | SMS and WhatsApp delivery | Phone numbers, message content, delivery metadata | Optional, configuration-gated |
| Sendblue | iMessage delivery | Phone numbers, message content, delivery metadata | Optional, configuration-gated |
| ElevenLabs | Voice synthesis | Script text, voice settings, generated audio | Optional, configuration-gated |
| Deepgram | Audio and video transcription | Submitted audio and video and resulting transcript data | Optional, configuration-gated |
| fal.ai | Hosted media-model inference | Generation prompts, references, generated media | Optional, configuration-gated |
| HeyGen | Avatar video generation | Script text, avatar selections, references, generated video | Optional, configuration-gated |
| Higgsfield | Video generation | Generation prompts, references, generated video | Optional, configuration-gated |
| OpusClip | Long-form video clipping and repurposing | Source-video URL, clipping instructions, keywords, generated clips | Optional, configuration-gated |
| Replicate | Hosted media-model inference | Generation prompts, references, generated media | Optional, configuration-gated |
| DeepL | Machine translation | Content selected for translation | Optional, configuration-gated |
| Perplexity | Current-information and web research | Research queries that may contain selected workspace context, and returned results | Optional, configuration-gated |
| Brave Search | Current-information and web research | Search queries that may contain selected workspace context, and returned results | Optional, configuration-gated |
| Serper | Current-information and web research | Search queries that may contain selected workspace context, and returned results | Optional, configuration-gated |
| Tavily | Current-information and web research | Search queries that may contain selected workspace context, and returned results | Optional, configuration-gated |
| Templated.io | Programmatic image and document variant rendering | Template identifiers, text, image, and color overrides, generated render metadata | Optional, configuration-gated |
| PostHog | Consent-gated product analytics | Pseudonymous user identifiers, product usage, page-navigation events, configured event properties | Optional, consent- and environment-gated |
| DataForSEO | SEO research, keyword enrichment, and rank monitoring | Keywords, target domains, requested locations, returned search-result data | Optional, configuration-gated |
| Honeycomb | Operational metrics export | Service names, metric names and values, timestamps, configured runtime attributes | Optional, environment-gated |
| Clearbit | Public brand-logo lookup for generated email designs | Resolved public brand domain used to request a logo | Optional, email-brand extraction path |
Customer-authorized connected platforms
These platforms are accessed only when you authorize the connector or channel. Examples include HubSpot, Salesforce, Pardot, Google Ads, Google Analytics, LinkedIn, Meta, Instagram, X (Twitter), TikTok, YouTube, Google Calendar, Microsoft 365, Snowflake, BigQuery, WordPress, and Webflow. Depending on the integration and your use case, a connected platform may act as a sub-processor, an independent controller, or a recipient directed by you.
Change notice
We provide at least 30 days' notice before adding a new material sub-processor, through the notice process in the governing customer agreement.
Questions
Contact legal@aldwin.io for sub-processor questions or DPA requests.
