Draft, attorney review pending. This notice describes our current practices accurately to the best of our knowledge and will be replaced with attorney-reviewed language before general commercial release.
Subprocessors
Last updated: September 3, 2026
Genstrata, Inc. uses the third-party providers below to deliver Apograph. Each processes data under commercial terms that restrict use to providing its service to us and, for AI providers, restrict use of submitted data for model training. Links to each provider's data terms are included.
GauntletScore is a Genstrata-operated verification component, not a third party. Claim verification through GauntletScore uses the providers on the GauntletScore subprocessors list at https://www.gauntletscore.com/subprocessors, which is incorporated here by reference.
Infrastructure
| Provider | Service | Data processed | Location | Terms | Added |
|---|---|---|---|---|---|
| Supabase, Inc. | Database, authentication, file storage | Tenant data and account data | US (Supabase Cloud) | https://supabase.com/legal/dpa | 2026-09 |
| Vercel, Inc. | Web application hosting and edge network | Requests, session tokens, request and error logs | US (edge globally) | https://vercel.com/legal/dpa | 2026-09 |
| Railway | Job and agent runtime hosting | Tenant work product during processing, job logs | US | https://railway.com/legal/privacy | 2026-09 |
| Lambda Cloud | GPU workers for voice rewriting when enabled | Voice text and job payloads | US | https://lambda.ai | 2026-09 |
| Resend, Inc. | Transactional and contact-form email | Email addresses, message content | US | https://resend.com/legal/dpa | 2026-09 |
| Google LLC (Google Identity) | OAuth sign-in | Account email and name | US | https://cloud.google.com/terms | 2026-09 |
| Google LLC (Google Workspace) | Mailboxes for privacy@, security@, legal@, info@ | Correspondence you send us | US | https://workspace.google.com/terms/dpa_terms.html | 2026-09 |
AI model providers
| Provider | Used for | Data processed | Location | Training on API data | Terms | Added |
|---|---|---|---|---|---|---|
| NVIDIA Corporation (NIM API) | Drafting and related agents (including MiniMax, Kimi, and Nemotron hosts on NIM) | Relevant draft, dossier, and voice text during inference | US (may process in other regions per terms) | Restricted by NVIDIA API terms | https://www.nvidia.com/en-us/agreements/privacy-policy/ | 2026-09 |
| xAI Corp | Drafting and related agents when selected in the live registry | Same | US (may process in other regions per terms) | No (API terms) | https://x.ai/legal/privacy-policy | 2026-09 |
| Google LLC (Gemini API) | Drafting and related agents when selected in the live registry | Same | US (may process in other regions per terms) | No on paid API terms | https://ai.google.dev/gemini-api/terms | 2026-09 |
| Moonshot AI | Drafting when Kimi is selected outside NIM | Same | US / provider regions per terms | Restricted by provider API terms | https://platform.moonshot.ai | 2026-09 |
| DeepSeek | Drafting when selected in the live registry | Same | Provider regions per terms | Restricted by provider API terms | https://www.deepseek.com | 2026-09 |
| Perplexity | Public-source research and hunter search | Recipient name and public-profile queries; not a full tenant dump | US (may process in other regions per terms) | Restricted by Perplexity API terms | https://www.perplexity.ai/hub/legal/privacy-policy | 2026-09 |
| Anthropic, PBC | When selected in the live registry | Relevant draft, dossier, and voice text during inference | US (may process in other regions per terms) | No (commercial API terms) | https://www.anthropic.com/legal/commercial-terms | 2026-09 |
| OpenAI, LLC | When selected in the live registry | Same | US (may process in other regions per terms) | No (business API terms) | https://openai.com/policies/business-terms | 2026-09 |
Notification of changes
We will notify Customers by email at least 30 days before adding a subprocessor that will process Customer Content. Customers may object in writing within that period; if we cannot resolve the objection, Customer may terminate under the Terms. Removals and changes that do not add a new processor are posted here without advance notice.
Questions: privacy@genstrata.com.
Genstrata, Inc., a Delaware corporation.
Legal: legal@genstrata.com. Privacy: privacy@genstrata.com. Security: security@genstrata.com. General: info@genstrata.com.
Postal address for service of process: write legal@genstrata.com for the current Delaware registered-agent street address on file with the Division of Corporations.