Redbelt

Subprocessors

Last updated: October 25, 2025

This notice lists third-party companies ("subprocessors") engaged by Redbelt AI LLC to help provide the Service. Each subprocessor is bound by confidentiality and data-protection obligations. Redbelt AI remains responsible for their performance.

Change notice. We'll update this page and provide 15 days' advance notice of additions via email or in-app (except where earlier use is required for security/legal reasons). To subscribe, email support@redbelt.ai with subject "Subscribe: Subprocessor Updates."

Current subprocessors

1. Microsoft Azure (Cloud Infrastructure)

  1. Purpose: Compute, database, storage, networking (hosts application, API, blob storage).
  2. Personal data processed: Account identifiers; operational/log metadata; Customer Data stored/processed by the Service.
  3. Processing location: US Azure regions (as configured).
  4. Retention: Per Azure service defaults; configured by Redbelt AI to align with our retention policy.

2. Cloudflare (CDN & Edge Security)

  1. Purpose: CDN, DDoS/bot protection, TLS termination, performance.
  2. Personal data processed: IP address, request headers, limited log metadata.
  3. Processing location: Global edge network (with US processing).
  4. Retention: Per Cloudflare service defaults.

3. WorkOS (Authentication & Directory Sync)

  1. Purpose: SSO/SAML/MFA, enterprise directory integrations.
  2. Personal data processed: Name, email, organization identifiers; authentication events.
  3. Processing location: United States (WorkOS regions as available).
  4. Retention: Per WorkOS policy.

4. Stripe (Payments & Invoicing)

  1. Purpose: Billing, payment processing, invoicing.
  2. Personal data processed: Billing contact details; payment method tokens/last-4 (no full card numbers stored by Redbelt AI); transaction metadata.
  3. Processing location: US/EU (Stripe global infrastructure).
  4. Retention: Per Stripe policy and applicable financial regulations.

5. E2B (Code Execution Sandboxes)

  1. Purpose: Ephemeral runtimes/sandboxes to execute user-initiated tasks.
  2. Personal data processed: Inputs necessary to execute tasks; runtime logs/metadata.
  3. Processing location: US/EU (as configured).
  4. Retention: Ephemeral by design; per E2B policy.

6. OpenAI (Model Providers)

  1. Purpose: Model inference (LLM/embeddings) to generate Outputs.
  2. Personal data processed: Prompts, files, and generated outputs as required to fulfill requests; operational metadata (e.g., token counts).
  3. Processing location: US/EU (per provider documentation).
  4. Retention: Per provider policy.

7. Anthropic (Model Providers)

  1. Purpose: Model inference (LLM/embeddings) to generate Outputs.
  2. Personal data processed: Same as above.
  3. Processing location: US/EU (per provider).
  4. Retention: Per provider policy.

8. xAI (Model Providers)

  1. Purpose: Model inference (LLM/embeddings) to generate Outputs.
  2. Personal data processed: Same as above.
  3. Processing location: US/EU (per provider).
  4. Retention: Per provider policy.

9. Google / Vertex AI (Model Providers)

  1. Purpose: Model inference (LLM/embeddings) to generate Outputs.
  2. Personal data processed: Same as above.
  3. Processing location: US preferred / global per service configuration.
  4. Retention: Per provider policy.

Notes on model providers

  • No training: As stated in our Terms/Privacy Policy, we do not allow training on Customer Data or Outputs unless you explicitly opt in in writing.
  • Minimum necessary sharing: We transmit only the inputs/attachments needed to fulfill your request, plus operational metadata.
  • Encryption: Data is encrypted in transit to providers.

Objecting to a new subprocessor

If you have a reasonable, documented data-protection objection to a newly announced subprocessor, email support@redbelt.ai within the 15-day notice window. We will work in good faith to resolve. If we cannot, you may terminate the affected Services and receive a prorated refund of prepaid, unused fees (as described in your agreement).

Definitions

  • Customer Data: Content you or your users submit to or via the Service (e.g., documents, prompts, messages, files).
  • Personal data: Information relating to an identified or identifiable person.
  • Subprocessor: A third party engaged by Redbelt AI to process Customer Data on our behalf to deliver the Service.