Subprocessor List
Natural Language Labs Inc. d/b/a Flashpoint.AI
Last Updated: February 2026
Flashpoint.AI uses the following third-party sub-processors to provide its services. Each sub-processor is bound by a Data Processing Agreement that provides at least the same level of data protection as described in our Privacy Policy and DPA.
| Sub-processor | Purpose | Data Processed | Location | Privacy Policy |
|---|---|---|---|---|
| Amazon Web Services (AWS) | Cloud infrastructure, hosting, data storage, compute | All platform data including personal data | United States | aws.amazon.com/privacy |
| Anthropic | AI/ML model inference for research and survey analysis | Survey responses, research data (anonymized where feasible) | United States | anthropic.com/privacy |
| Auth0 (Okta) | User authentication and identity management | User credentials, email, profile data, session data | United States | auth0.com/privacy |
| Google (Google Analytics) | Website analytics and usage tracking | IP addresses, page views, clickstream data, browser and device information | United States | policies.google.com/privacy |
| Groq | AI/ML model inference for survey assistance and content generation | Survey questions, prompts, generated content | United States | groq.com/privacy-policy |
| Mapbox | Map rendering, geolocation, and geographic data visualization | Location data, geographic coordinates, usage telemetry | United States | mapbox.com/legal/privacy |
| Meta (Facebook) | WhatsApp Business Account integration and messaging | WhatsApp business account data, phone numbers, OAuth tokens | United States | facebook.com/privacy/policy |
| Microsoft | AI research assistant integration via Microsoft Graph API | Email addresses, names, email content, calendar data, OAuth tokens | United States | privacy.microsoft.com |
| Modal | Serverless compute for survey generation, AI agents, and export processing | Survey data, research prompts, export content | United States | modal.com/privacy |
| OpenAI | AI/ML model inference for research and survey analysis | Survey responses, research data (anonymized where feasible) | United States | openai.com/privacy |
| Sentry | Application error tracking and performance monitoring | IP addresses, browser data, error context, device info | United States | sentry.io/privacy |
| Slack | Internal team communications and support workflows | Incidental personal data in support tickets and communications | United States | slack.com/trust/privacy/privacy-policy |
| Stripe | Payment processing, billing, fraud detection | Payment information, billing address, transaction data | United States | stripe.com/privacy |
| Twilio | SMS, email, and communication services | Phone numbers, email addresses, message content | United States | twilio.com/legal/privacy |
| Vercel | Application hosting, deployment, and edge delivery | Application logs, request data, deployment metadata | United States | vercel.com/legal/privacy-policy |
Notification of Changes: Flashpoint.AI will notify customers of any changes to this list at least 30 days before a new sub-processor begins processing personal data. Customers may object to a new sub-processor by contacting us at dpo@flashpoint.ai within 30 days of notification.
Contact: For questions about our sub-processors or data processing practices, please contact dpo@flashpoint.ai.