Legal
Subprocessors
Last updated Oct 2026
Every third party that can touch customer data while you use runaii.cloud. What each one sees is listed, not just who they are. The data handling rules themselves are on the Data Policy.
| Subprocessor | Purpose | Data it sees | Region |
|---|---|---|---|
| Google Cloud Platform | GPU compute, storage, logs, networking | Prompts and outputs in transit; request logs at rest | US / EU / APAC |
| Cloudflare | DNS, CDN, WAF, edge rate limiting | Request metadata at the edge (IP, user agent) | Global edge |
| Clerk | Authentication and session management | Account identifiers, email, session tokens | US |
| Dodo Payments | Payment processing and invoicing | Billing details, invoice records | India / US |
| Resend | Transactional email delivery | Email address, message content we send | US |
| PostHogopt-in | Product analytics (opt-in only) | Product events, no prompt content | US |
| Plausibleopt-in | Page analytics (opt-in only) | Pageviews, no personal identifiers | EU |
| Google Analyticsopt-in | Page metrics (opt-in only, IP anonymized) | Page metrics, no prompt content | US |
Changes and objections
New subprocessors that can touch customer data are announced in the changelog before they go live, and Enterprise customers get notice at the address on file. DPAs and custom terms are handled at [email protected].