Subprocessors
Effective Date: May 23, 2026
Last Updated: May 23, 2026
Version: 1.1
About This Page
Neural Partners Inc. ("Neural Partners") uses third-party service providers ("Subprocessors") to provide and support our products and services. This page lists each Subprocessor that processes Personal Data on Neural Partners' behalf, the nature of the services provided, and the jurisdiction in which processing primarily occurs.
This list is incorporated by reference into the Neural Partners Data Processing Addendum ("DPA") and into Section 5.4 of the Neural Partners Master Subscription Agreement ("MSA").
Neural Partners remains responsible for the performance of its Subprocessors under the DPA and MSA. Each Subprocessor is bound by data-protection obligations substantially similar to those Neural Partners owes its Customers.
Notice and Objection
Neural Partners will provide at least fifteen (15) days' prior notice to paid Customers (or thirty (30) days for high-impact additions, such as changes to a primary AI model provider or a Subprocessor processing a substantial volume of Customer Personal Data) before engaging a new Subprocessor that processes Customer Personal Data, by:
- Updating this page with the new Subprocessor's name, services, and jurisdiction, and
- Sending notice by email to the billing or legal contact on Customer's account.
Notice is not required for changes that do not materially affect the processing of Customer Personal Data, including:
- Internal corporate restructuring of an existing Subprocessor (mergers, acquisitions, rebranding, etc.)
- The addition of regions or availability zones within an existing infrastructure Subprocessor
- Name changes
Immediate-add carveout. Neural Partners may engage a new Subprocessor without prior notice where reasonably necessary to address a security incident, comply with legal process, prevent fraud, or maintain service continuity. In such cases, Neural Partners will provide notice as soon as reasonably practicable thereafter.
Customer objection right. Paid Customers may object in good faith to a new Subprocessor within thirty (30) days of notice by writing to privacy@neuralpartners.ai. Neural Partners will work with Customer to identify a commercially reasonable alternative. If no alternative is feasible, Customer may terminate the affected Services for cause and receive a pro-rated refund of any prepaid, unused fees attributable to the affected Services.
For full terms, see MSA §5.4 and DPA §5.
Current Subprocessors
Infrastructure
| Subprocessor | Services Provided | Processing Location | Privacy Notice |
|---|---|---|---|
| Amazon Web Services, Inc. | Cloud infrastructure (compute, storage, database hosting, CloudFront CDN, IAM), Amazon Simple Email Service (Amazon SES) for transactional email, and Amazon Bedrock for hosted access to AI foundation models | United States (with regional configuration where applicable) | aws.amazon.com/privacy |
Communications
| Subprocessor | Services Provided | Processing Location | Privacy Notice |
|---|---|---|---|
| Klaviyo, Inc. | Marketing email and SMS delivery, audience segmentation, subscriber management, customer-engagement analytics for marketing communications | United States | klaviyo.com/legal/privacy-notice |
AI Model Providers
| Subprocessor | Services Provided | Processing Location | Privacy Notice |
|---|---|---|---|
| Anthropic, PBC | AI model services (Claude) for conversational, generative, search, ranking, and recommendation features. Anthropic's commercial API terms prohibit training on Neural Partners' API inputs and outputs by default. | United States | anthropic.com/legal/privacy |
| OpenAI, LLC | AI model services (GPT models, embeddings, Whisper transcription) used in selected product features. OpenAI's commercial API terms prohibit training on Neural Partners' API inputs and outputs by default. | United States | openai.com/policies/privacy-policy |
| Midjourney, Inc. | AI image generation for marketing visuals and select product features | United States | midjourney.com/legal |
| ElevenLabs, Inc. | AI voice generation and audio features | United States | elevenlabs.io/privacy |
Note: Neural Partners also runs certain open-source AI models (including Google's Gemma) locally within our AWS infrastructure. Locally hosted models do not constitute a separate Subprocessor relationship because no Customer Personal Data is transmitted to the model author. Models accessed via Amazon Bedrock are processed within the AWS Subprocessor relationship above.
Search
| Subprocessor | Services Provided | Processing Location | Privacy Notice |
|---|---|---|---|
| Typesense, Inc. (Typesense Cloud) | Hosted search engine for product and content search | United States | typesense.org/privacy |
Payments
| Subprocessor | Services Provided | Processing Location | Privacy Notice |
|---|---|---|---|
| Stripe, Inc. | Payment processing for subscriptions and (via Stripe Connect) for transactions on Customer storefronts powered by the Digital Experience Platform | United States | stripe.com/privacy |
| Apple Inc. | Apple Pay tokenization for payment methods. Underlying payment processing flows through Stripe; Apple Inc. operates the Apple Pay infrastructure and processes Apple Pay tokens | United States | apple.com/legal/privacy |
Identity, Analytics, and Advertising
| Subprocessor | Services Provided | Processing Location | Privacy Notice |
|---|---|---|---|
| Google LLC | Sign in with Google (OAuth / identity), Google Analytics 4 (server-side), Google Ads conversion measurement, and administrative Google Cloud Console access for managing API keys and integrations | United States and other locations as applicable | policies.google.com/privacy |
| Meta Platforms, Inc. | Conversions API integration for measuring advertising effectiveness on Facebook and Instagram | United States and other locations as applicable | facebook.com/privacy/policy |
| Microsoft Corporation (Microsoft Advertising / Bing Ads) | Advertising measurement and conversion tracking through Microsoft Advertising / Bing Ads | United States and other locations as applicable | privacy.microsoft.com |
| Amazon.com Services LLC (Amazon Advertising) | Sponsored advertising measurement and conversion tracking via the Amazon advertising pixel | United States | amazon.com/gp/help/customer/display.html?nodeId=GX7NJQ4ZB8MHFRNJ |
Monitoring and Observability
| Subprocessor | Services Provided | Processing Location | Privacy Notice |
|---|---|---|---|
| Functional Software, Inc. (Sentry) | Application error monitoring and performance tracking (error messages, stack traces, device information) | United States | sentry.io/privacy |
| PostHog Inc. | Product analytics (feature usage, event tracking, behavioral cohorts) for the Website and Neural Core | United States | posthog.com/privacy |
| Grafana Labs, Inc. (Grafana Cloud) | Hosted observability platform (logs, metrics, traces) for operational monitoring, connected through a private data tunnel into Neural Partners' secure AWS VPN-backed environment | United States | grafana.com/legal/privacy-policy |
Sales and Enrichment
| Subprocessor | Services Provided | Processing Location | Privacy Notice |
|---|---|---|---|
| Clay Labs, Inc. | Contact enrichment, prospecting, and sales data processing for outbound activities | United States | clay.com/privacy |
Subprocessor Use of Customer Data
All Subprocessors listed above are contractually bound to process Customer Personal Data only:
- For the limited purposes necessary to deliver the relevant service to Neural Partners
- In accordance with applicable data-protection laws (including GDPR, UK GDPR, CCPA/CPRA, and other U.S. state privacy laws)
- Subject to confidentiality obligations substantially similar to those Neural Partners owes its Customers
- Without retaining, using, or disclosing the data outside the direct business relationship between Neural Partners and the Subprocessor
No AI training on Customer Content. Consistent with MSA §4.2 and DPA §4.3, Neural Partners does not provide Customer Content (including Customer Data, AI Inputs, and AI Outputs of paid Customers) to its Subprocessors for any purpose other than to deliver the Services. Neural Partners' AI model providers (Anthropic, OpenAI) operate under commercial terms that prohibit training on the data submitted via their APIs by default.
International Data Transfers
Where a Subprocessor processes Personal Data outside of the jurisdiction in which it was collected, Neural Partners relies on appropriate transfer mechanisms, including the European Commission's Standard Contractual Clauses and the UK International Data Transfer Addendum. See DPA Annex 4 for additional information.
Change Log
| Date | Change |
|---|---|
| May 23, 2026 (v1.1) | Subprocessor list reviewed and updated. Added: Amazon Bedrock (under AWS), Apple Pay, OpenAI, Midjourney, ElevenLabs, Typesense, Microsoft Corporation, Amazon Advertising, PostHog, Grafana Labs, Clay Labs. Removed: HUMAN Security, Fluency Inc. Confirmed not subprocessors (not separately listed): Google Cloud Platform (services consolidated under Google LLC), locally-hosted open-source models (no data transmission), Hugging Face (model download only), Moonshot AI (covered via AWS Bedrock). |
| May 23, 2026 (v1.0) | Initial version published. |
Contact
Questions about this Subprocessor list, requests for additional information, or objections to a new Subprocessor:
Neural Partners Inc.
- Privacy: privacy@neuralpartners.ai
- Legal: legal@neuralpartners.ai
- Phone: (802) 990-3883
- Contact form: neuralpartners.ai/contact-us
Mailing Address: 390 NE 191st St, STE 65820, Miami, FL 33179