Sub-Processors
Serverity AI Limited uses the following third-party service providers (sub-processors) to deliver our platform. Each sub-processor is bound by a Data Processing Agreement and processes data only for the purposes described below.
| Sub-Processor | Service | Location | Data Processed | Security |
|---|---|---|---|---|
| Anthropic | AI analysis engine (Claude) | United States | Document text for AI analysis, drafting, and audit review. Data is not used for model training. | SOC 2 Type II |
| OpenAI | AI verification engine and embeddings | United States | Document text for cross-verification audit and text embeddings. Data is not used for model training. | SOC 2 Type II |
| AWS | Application hosting, database, storage, email, caching (App Runner, RDS, S3, SES, ElastiCache) | EU (London, eu-west-2) | All structured platform data, uploaded documents, application execution, email delivery, and rate limiting. | SOC 2 Type II, ISO 27001 |
| Stripe | Payment processing | United States | Subscription and payment data. | PCI DSS Level 1 |
| PostHog | Product analytics | EU | Anonymised usage analytics (only with user consent). | SOC 2 Type II |
| Sentry | Error monitoring | United States | Application error data (may include user identifiers). | SOC 2 Type II |
| Authentication | United States | OAuth sign-in tokens. | ISO 27001 |
This register was last updated on 1 April 2026. We will update this page when sub-processors are added, removed, or change their data processing scope.
For questions about our sub-processors, contact founder@serverity.ai or founder@serverity.ai.