Subprocessors
The current list of third-party services RegAlytics uses to deliver the platform. Updated whenever a sub-processor is added, removed, or changed. Customers receive 30 days’ written notice ahead of any addition.
How this list is maintained
This list is kept in sync with our internal procurement register. Every addition, removal, or jurisdictional change is logged with an effective date and an internal ticket number. We notify customers via email and via the changelog at docs.regalytics.ai/changelog at least 30 days before any addition takes effect. Removals and changes that materially reduce the data flowing to a sub-processor are not subject to notification.
Current list
Hosting and infrastructure: Amazon Web Services (US, EU). Database: Amazon RDS (US, EU). Search and analytics: AWS OpenSearch (US, EU). CDN and edge: Cloudflare (global). Email transactional: Postmark (US). Customer support and ticketing: Intercom (US). Authentication: Auth0 (US, EU). Logging and monitoring: Datadog (US). AI processing for summarisation features: Anthropic (US), OpenAI (US). AI processing is configurable per-customer and can be disabled for accounts that prefer to run AI features off-platform.
Data processing agreements
Each sub-processor is bound by a written data processing agreement that flows through the obligations under our DPA. The sub-processor list and the regions in which they process customer data are reviewed quarterly. Any change is logged and dated.
Questions
Questions about a specific sub-processor, the regions in which they process customer data, or the security posture we have on file? Email privacy@regalytics.ai. We respond within five working days.
Have a question about a sub-processor?
Email privacy@regalytics.ai or use the form below. We respond within five working days.