Sub-processors

Last updated: 16 October 2026

ional.ai uses the providers below to run the Service. They are authorised under the data processing agreement. We update this page and its date when the list changes. To object to a new sub-processor, write to [email protected].

Vendor	Legal entity	What it does for ional.ai	Data involved	Location / transfer basis
Cloudflare	Cloudflare, Inc. (San Francisco, USA)	Hosting, storage, compute and containers	All Customer Content and account data held in the Service	Global network including the USA. EU-US Data Privacy Framework; Standard Contractual Clauses (Cloudflare DPA)
Anthropic	Anthropic Ireland, Limited for customers in the EEA; Anthropic, PBC (USA) elsewhere	Claude AI models: text generation and analysis	Text and documents sent in a run	Standard Contractual Clauses (Anthropic DPA). Anthropic does not train its models on API inputs or outputs by default
Google	Google LLC or Google Ireland Limited, depending on the service	Gemini (image generation); Google sign-in; Gmail (account emails); Google Analytics only with your consent	Image prompts and images; sign-in identity; email address and content of account emails; analytics data if you consent	Gemini paid service: Google does not use prompts or responses to improve its products. Transfers under Google's data processing terms
Apify	Apify Technologies s.r.o. (Prague, Czech Republic)	Collects public LinkedIn data (HarvestAPI actors) for Signals, Discovery, Prospect research and Brain quick start	Public LinkedIn posts and profile details, search terms	EU entity. Standard Contractual Clauses for its sub-processors outside the EEA
Firecrawl	SideGuide Technologies, Inc. d/b/a Firecrawl (Delaware, USA)	Reads public websites for the AI visibility audit and Brain quick start	Public website addresses and page content	USA
Magnific	Magnific AI, S.L.U. (Málaga, Spain)	Image and video generation, including Kling video models	Prompts, images and video supplied for a run	Spain (EU). Magnific states it does not use inputs or outputs to train AI models
Deepgram	Deepgram, Inc. (San Francisco, USA)	Speech-to-text for Clips	Audio and transcripts	USA. Standard Contractual Clauses
Stripe	Stripe Payments Europe Limited (Ireland) in Europe; Stripe, LLC (USA)	Payments	Billing name, email, card and payment details, transaction records	EU-US Data Privacy Framework; Standard Contractual Clauses
Microsoft	Microsoft (US entities)	Optional Outlook / Microsoft sign-in connection, only if you connect it	Sign-in identity and the mailbox or calendar data you authorise	USA. EU-U.S. Data Privacy Framework
Vimeo	Vimeo.com, Inc. (New York, USA)	Optional connection you choose, for video	Video files and metadata you choose to connect	EU-US Data Privacy Framework; Standard Contractual Clauses where appropriate

Vendor sources: - Cloudflare: https://www.cloudflare.com/cloudflare-customer-dpa/ and https://www.cloudflare.com/trust-hub/gdpr/ - Anthropic: https://www.anthropic.com/legal/commercial-terms, https://www.anthropic.com/legal/data-processing-addendum, https://privacy.claude.com/en/articles/7996868-is-my-data-used-for-model-training - Google: https://ai.google.dev/gemini-api/terms - Apify: https://docs.apify.com/legal/data-processing-addendum and https://docs.apify.com/legal/gdpr-information - Firecrawl: https://www.firecrawl.dev/privacy-policy and https://www.firecrawl.dev/terms-of-service - Magnific: https://www.magnific.com/legal/privacy and https://www.magnific.com/ai/docs/enterprise-content-and-legal - Deepgram: https://deepgram.com/privacy - Stripe: https://stripe.com/en-mt/legal/dpa/faqs and https://stripe.com/legal/privacy-center - Vimeo: https://vimeo.com/legal/privacy and https://help.vimeo.com/hc/en-us/articles/22793873068305-Does-Vimeo-participate-in-the-EU-US-Data-Privacy-Framework-DPF - Microsoft: https://microsoft.com/privacy/microsoft-data-privacy-framework-covered-entities