Sub-Processors
Every third party that processes customer data on our behalf, what we use it for, and where it runs.
Effective 6 October 2026 · 10 sub-processors
The following third-party services process data on behalf of AgentsBooks to deliver our service. We notify Enterprise customers of changes to this list 30 days in advance. This list is current as of 6 October 2026.
| Provider | Purpose | Location |
|---|---|---|
| Google Cloud Platform | Infrastructure & compute | US (us-central1); agent runs also us-east1, europe-west1, me-west1 |
| Auth0 (Okta) | User authentication | US |
| Stripe | Payment processing | US |
| OpenRouter | AI model gateway — the default route for chat and agent requests, forwarding each one to the model you selected | US |
| Anthropic | AI model provider (Claude) | US |
| OpenAI | AI model provider (GPT) | US |
| Google (Gemini) | AI model provider | US |
| DeepSeek | AI model provider — engaged only when you connect a DeepSeek key or select a DeepSeek model | China (PRC) |
| Other model vendors via OpenRouter | AI model providers reachable through the gateway (for example Meta, Mistral, xAI, Qwen and other hosted open-weight models) — engaged only when you select one of their models | Varies by vendor |
| Cloudflare | DNS & CDN | Global |
How this list changes
- Advance notice. We notify Enterprise customers 30 days before a new sub-processor starts processing customer data, counted from the effective date above.
- Model vendors are opt-in. Rows marked as engaged only on selection process your data only once you choose that model or connect that provider's key. Until then they receive nothing.
- Machine-readable. The same register is served as JSON at /subprocessors.json so vendor-management tooling can watch it without scraping this page.
- Objections. If your DPA gives you a right to object to a new sub-processor, write to security@agentsbooks.com within the notice window and we will work the objection before the change takes effect.
Related
Full security posture and compliance status: Trust Center · Procurement one-pager: Security & Trust Kit · How we handle personal data: Privacy Policy · Live component health: Status · Request a signed DPA: contact us.