Overview
To operate the Agent K platform we engage the third-party service providers (“sub-processors”) listed below. Each is bound by a data processing agreement that obliges it to handle Customer Data only on documented instructions and to apply appropriate technical and organisational security measures. Sub-processors that operate outside the European Economic Area (EEA) or Switzerland do so under Standard Contractual Clauses or an applicable adequacy decision.
For the broader privacy context, see the Privacy Policy; customer data handling specifically is governed by your organisation’s agreement with Kritos and the associated Data Processing Agreement.
Infrastructure & storage
| Sub-processor | Purpose | Data location |
|---|---|---|
| Vercel Inc. | Application hosting (Functions, Routing Middleware), build & delivery, file storage (Vercel Blob). | EU / global edge |
| Neon Inc. | Managed PostgreSQL database for all primary application data, with Row Level Security enforced per organisation. | EU (Frankfurt) |
| Inngest Inc. | Background-job orchestration: AI summaries, file processing, scheduled tasks. | EU / US |
AI model providers
AI models are invoked on-demand to generate summaries, drafts, suggestions, and chat responses. Inputs may include Customer Data such as deal documents and user prompts. Each provider below has confirmed contractually that data sent via their API is not used to train their models.
| Sub-processor | Purpose | Data location |
|---|---|---|
| Anthropic, PBC | Claude family models — primary provider for memo generation, chat, suggestion editing, classification. | US |
| Google LLC | Gemini models — utility/classifier tasks where Claude is not used. | EU / US |
Authentication & user-connected integrations
Some sub-processors are only invoked when an end-user explicitly connects their account or uploads a particular file format.
| Sub-processor | Purpose | Data location |
|---|---|---|
| Google LLC | Single Sign-On for account creation; Google Drive API for exporting documents to a user’s Drive (only when the user initiates). | EU / US |
| Microsoft Corporation | OneDrive / SharePoint via Microsoft Graph for DOCX and XLSX preview rendering (Office Online embed). | EU / US |
| Tiptap GmbH | Real-time collaborative editing infrastructure (Tiptap Cloud) — synchronises rich-text document state across collaborators via Yjs CRDTs. | EU |
| Granola Inc. | Optional integration: imports meeting notes into a workspace when an organisation explicitly connects their Granola account. | US |
Operational & communications
| Sub-processor | Purpose | Data location |
|---|---|---|
| Resend Inc. | Transactional email delivery — account verification, password reset, team invitations. | EU / US |
| Functional Software, Inc. (Sentry) | Error monitoring and crash reporting (always-on under legitimate interest); Session Replay (only after cookie-banner consent). | EU (Frankfurt) |
| PostHog Inc. | Product analytics — only after cookie-banner consent or sign-in. | EU |
Changes to this list
We may update this list from time to time as we add, replace, or retire sub-processors. Material changes are communicated to organisation administrators in advance via the contact email on record. The Last updated date at the top of this page reflects the most recent revision.
Contact
For questions about a sub-processor, to object to a planned change, or to request a copy of the relevant Data Processing Agreement, contact privacy@kritos.ai.
See also: Privacy Policy →