# Sub-processors: who else touches your data

The vendors that touch data on Tileward's hosted service and on tileward.com, what each one is for and the data it sees. If you run Tileward in your own VPC or air-gapped, none of this list applies to your data: no sub-processor of ours is in that path, because Tileward is not in that path either.

Page: https://tileward.com/subprocessors/

## Current sub-processors

| Sub-processor | Purpose | Data categories |
|---|---|---|
| Cloudflare, Inc. | Serves tileward.com, the marketing website only. Customer product data is covered by the row below. | The referring URL, the country reported for the connection, and the browser user-agent for each page view. Connection IP addresses are necessarily visible to route the request. |
| Amazon Web Services (AWS) and Google Cloud Platform (GCP) | Running the model behind api.tileward.com, storing what Context holds for hosted customers, and hosting the account and billing database, including account email addresses. | Account data (name, work email, company, hashed API keys); prompts, completions, stored conversation turns and documents; audit records. |
| Stripe, Inc. | Taking payments. | Billing contact and payment details. Card details are entered on Stripe's hosted pages; Tileward stores the brand and last four digits only. |
| Google LLC (Google Calendar booking) | Booking a call with us: "Book 30 minutes" opens a Google Calendar booking panel in the page, and the calendar event that results is how we see it. | Whatever you enter on Google's own booking page to reserve a slot, typically your name, email address and the time you choose. |

The page also states how account email (sign-in, key issuance, billing notices) is sent.

## Location

- AWS and GCP: United States only.
- Stripe: Stripe, Inc. is a US company. Where its systems process and store data is Stripe's own commitment: see [Stripe's own sub-processor list](https://stripe.com/legal/service-providers) for the current answer.
- Google: Google's own commitment: see [Google Workspace's sub-processor list](https://workspace.google.com/terms/subprocessors/) for the current answer.

The full text is at https://tileward.com/subprocessors/.

## Related

- [Privacy policy](https://tileward.com/privacy/): what Tileward holds and for how long
- [Data processing addendum](https://tileward.com/dpa/): the processor terms for the hosted service
- [Security](https://tileward.com/security/): deployment boundaries, audit retention and certifications
- [Terms of service](https://tileward.com/terms/): the agreement, in plain words