Subprocessor List
Last updated — 18 September 2025
This page lists the third-party service providers ("subprocessors") that OneWord AI Inc. uses to process personal data on our behalf. All subprocessors are bound by strict data processing agreements to ensure the protection of your personal information.
Change Notifications
We will update this list when we add or remove subprocessors. For material changes, we will notify users via email at least 30 days in advance, giving you the opportunity to object or terminate your account if you disagree with the new processing arrangements.
Current Subprocessors
| Service Provider | Purpose | Data Location | Safeguards |
|---|---|---|---|
Amazon Web Services (AWS) Cloud Infrastructure | Cloud hosting, data storage, compute services | United States | SCCs, AWS GDPR compliance |
Vercel Inc. Web Platform | Website hosting, CDN, performance analytics | United States | SCCs, SOC 2 Type II |
Stripe, Inc. Payment Processing | Payment processing, subscription management | United States | PCI DSS Level 1, SCCs |
Upstash Data Storage | Redis caching, session management | United States | SOC 2, encryption at rest |
PostHog Analytics | Product analytics, user behavior insights | United States | SCCs, GDPR compliance |
OpenAI AI Services | AI text processing, content generation | United States | Business Associate Agreement, zero retention |
Anthropic AI Services | AI text processing, content analysis | United States | Data Processing Agreement, zero retention |
Resend Email Services | Transactional emails, notifications | United States | GDPR compliance, data retention controls |
Sentry Error Monitoring | Application monitoring, error tracking | United States | SCCs, data scrubbing, limited retention |
Data Protection Measures
All subprocessors are required to:
- Process data only as instructed by OneWord AI Inc.
- Implement appropriate technical and organizational security measures
- Maintain confidentiality of all personal data
- Assist with data subject requests and regulatory compliance
- Notify us immediately of any data breaches
- Delete or return data upon termination of services
International Transfer Safeguards
For subprocessors located outside the EU/UK:
- Standard Contractual Clauses (SCCs): EU Commission approved clauses
- UK IDTA: UK International Data Transfer Agreement
- Adequacy Decisions: Where applicable
- Additional Safeguards: Encryption, access controls, audit requirements
Your Rights
You have the right to:
- Object to processing by specific subprocessors (may affect service availability)
- Request information about our data processing agreements
- File complaints with your local data protection authority
To exercise these rights or ask questions about our subprocessors, contact readwithoneword@gmail.com.
Questions?
For questions about our data processing practices or subprocessors, contact readwithoneword@gmail.com.