status

The list below is accurate as of the date on this page, but the formal notice-of-change commitment that belongs with it is pending legal review. Owner: founder + counsel. Blocking gate: legal review, before public launch.

A subprocessor is a third party that can process customer data on our behalf. This is the complete list. It changes here first.

Subprocessor	Purpose	What it can see
Anthropic	The model that answers questions and authors artifacts	Question text, schema and semantic-model context, and query results returned to the agent. Under commercial terms that exclude training on inputs and outputs.
Voyage AI	Embeddings for search over past conversations and documents	Message and document text that is embedded. Applies only when semantic search is enabled.
Resend	Transactional email — sign-in links, invitations, alerts	Recipient email address and message content.
Hosting provider	Runs the application and the control-plane database	All data at rest in the control plane, as the infrastructure operator.
CDN / static host	Serves this marketing website	Web server logs for this site only. No product data.
Google	Optional “Continue with Google” sign-in	Email address and basic profile, only for users who choose that sign-in method.

Not currently in use, listed so the absence is explicit: no analytics vendor, no advertising network, no session-recording tool, no customer-support widget, no CRM with product-data access. Stripe will be added here when billing ships.

Your database is not on this list, because we do not copy it. Evalyst holds read-only credentials and queries it in place; what we retain is the answers and the dashboard snapshots you pin.

Last reviewed: July 2026.