Third-Party Subprocessors
Last updated: August 2026·Version 2.0
Subprocessor Governance & Due Diligence
SiteMind works with specialized infrastructure partners to host our applications, compute vector embeddings, and process payments. Prior to engaging any subprocessor, we conduct thorough security reviews and enter into binding Data Processing Agreements incorporating standard data protection clauses.
| Subprocessor | Corporate Entity | Processing Purpose | Data Location | Transfer Safeguards |
|---|---|---|---|---|
| Google Cloud (AI Services) | Google LLC | AI conversational inference, semantic vector chunk embeddings, and speech-to-text processing under zero-data-retention commercial terms. | United States / European Union | Commercial Enterprise Terms (Zero Model Training), EU Standard Contractual Clauses |
| Managed Relational & Vector Database | Database Cloud Infrastructure Provider | Encrypted PostgreSQL database and high-dimensional vector storage for tenant-isolated knowledge retrieval and data persistence. | European Union / United States | Disk Encryption at Rest (AES-256), TLS 1.3 in Transit, Automated Backups |
| Application Compute & Worker Infrastructure | Cloud Compute & Container Provider | API server compute, background job workers, and transient operational state caching. | United States / European Union | EU Standard Contractual Clauses, Container Isolation, TLS 1.3 in Transit |
| Edge Network, WAF & Encrypted Object Storage | Global CDN & Security Provider | Edge DNS routing, DDoS mitigation, Web Application Firewall (WAF), and encrypted document asset storage. | Global Edge | SOC 2 Type II Certified, S3-Compatible Encrypted Storage at Rest |
| Frontend Hosting & Edge Routing | Global Edge Hosting Provider | Frontend web application delivery, global edge caching, and privacy-conscious diagnostic telemetry. | Global Edge | EU Standard Contractual Clauses, Consent-Gated Analytics |
| Payment Processing & Merchant of Record | Merchant of Record & Billing Partner | PCI-DSS compliant payment processing, subscription management, and global VAT/tax compliance. | United States / European Union | PCI-DSS Level 1 Compliant, Tokenized Payment Storage |
| Transactional Email Infrastructure | Cloud Email Delivery Provider | Secure delivery of account verification, password resets, and critical system notifications. | United States | EU Standard Contractual Clauses, Encrypted SMTP/API Transports |
| Application Error & Health Monitoring | Telemetry & Observability Provider | Aggregated application exception tracking and system performance diagnostics for rapid bug remediation. | United States | EU Standard Contractual Clauses, Data Processing Addendum |
Subprocessor Modification & Notice Process
In accordance with our Data Processing Agreement (DPA), SiteMind will notify customers of any planned addition or replacement of a subprocessor at least 14 days in advance.
Customers may subscribe to subprocessor notifications or raise objections on legitimate data protection grounds by contacting [email protected].
Related Legal Documents