Sub-Processor Register
Version 2026-02 • Effective 2026-02-24
| Vendor | Service | Data Categories | Deployment Modes | Region | Transfer Basis |
|---|---|---|---|---|---|
| Amazon Web Services (AWS) | Core cloud hosting for platform and tenant databases/storage | account data, compliance data, tenant operational data | cloud | UAE | Primary processing within UAE-hosted infrastructure |
| Amazon Web Services (AWS Bedrock) | AI inference services for configured product features | document text, compliance prompts, model outputs | cloud, byod | UAE | UAE region configuration with contractual safeguards |
| Stripe, Inc. | Subscription and payment processing | billing identity, transaction metadata | cloud, byod | International | Approved operational exception with PCI DSS controls |
| Microsoft (Azure/Graph) | Transactional email delivery | email address, notification content, delivery metadata | cloud, byod | UAE/Configured tenant region | Contractual controls and tenant mailbox configuration |
| Sentry | Application error and performance telemetry | application diagnostics, sanitized request metadata | cloud, byod | Configured region | Approved operational exception with data minimization/scrubbing |
| MCP ADHICS v2 Service | Regulatory assistant orchestration for ADHICS Q&A | user question text, citations, response content | cloud, byod | Configured region | Approved operational exception; disclosed sub-vendors include OpenAI and Qdrant where configured |