Back to home

Legal · Draft

Sub-processors

This draft inventory lists the third-party providers expected to support Kansei account, billing, hosting, backup, DNS, remote-pairing, and social sign-in workflows. It is pending owner/legal approval.

Pre-launch draft Status Not yet effective ~4 min read
Draft

This page is a pre-launch draft for owner/legal review. It is not an effective sub-processor notice until Uplift Security approves and publishes a final version and effective date.

Plain English

We use a small set of vendors for hosting, backup storage, billing, transactional email, DNS, and the encrypted remote-pairing tunnel — plus the social sign-in you choose to use. None of them ever receive your source code, prompts, model responses, or provider keys — those stay on your machine.

01 What a sub-processor is #

A sub-processor is a third-party company we engage to process limited personal data on our behalf so we can operate the service — for example, a payment processor that handles your subscription. This page is referenced by our Privacy Policy and lists the sub-processors currently in use.

02 Current sub-processors #

For launch review, the current provider inventory is:

Provider
Purpose & data handled
Region
Amazon Web Services
Hosting for this website, the identity service, the Kansei cloud control plane, self-hosted Postgres, secrets storage, and AWS SES transactional email from no-reply@kansei.sh. Holds account email, subscription state, operational/security logs, content-free usage metadata, and transactional email delivery data.
United States
Backblaze B2
Off-site backup storage for database and Kansei cloud recovery archives. Backup material can include account, subscription, operational/security, and content-free usage metadata; never source code, prompts, model responses, or provider keys.
United States
Stripe
Subscription billing and payments. Receives your email and a payment token — never full card numbers.
United States
Cloudflare
DNS for our domains, and the encrypted tunnel for optional remote device pairing. Carries connection metadata and end-to-end-encrypted traffic it cannot read — never your code, prompts, or responses.
Global edge
Google, GitHub & Apple
Only if you choose social sign-in: the provider confirms your identity so we can log you in. Google and GitHub are always available; Apple is available only when this deployment enables it with a complete Apple credential set. They receive no Kansei usage data.
Global

This is the current launch inventory, not an example list. AWS region details and final legal approval remain pending before this page is treated as final.

03 What never reaches them #

Local-first

No sub-processor receives your source code, prompts, agent transcripts, or provider API keys. Inference goes directly from your machine to the AI providers you connect.

Because Kansei runs locally, the most sensitive data never enters our infrastructure — and therefore never reaches any sub-processor. The vendors above handle only the limited account, operational, backup, billing, transactional-email, and content-free usage metadata described.

04 How we vet them #

The launch legal workflow requires each listed provider to be reviewed for security posture, data-protection practices, confidentiality, and handling data only for the service purposes described here.

  • Each provider is scoped to the minimum data needed for its function.
  • Agreements require appropriate technical and organizational safeguards.
  • We periodically review providers and remove any we no longer need.

05 International transfers #

Some sub-processors operate in the United States or other regions. Where personal data is transferred across borders, we rely on appropriate safeguards — such as standard contractual clauses — to protect it in line with applicable law.

06 Changes & notice #

When this notice is approved for launch, this page will show a final version and effective date. Later material provider changes will update that effective date and, where appropriate, be announced through the published notice process.

07 Contacting us #

Questions about our sub-processors, or requests for advance-change notice, can be sent to the address below.

Questions about our vendors?

Privacy and sub-processor questions go straight to a human on our team.

privacy@kansei.sh
Link copied