1.OverviewLink to this section
To deliver the Services, Dench engages a small set of trusted third-party providers ("subprocessors") that may process Customer Data on our behalf. We act as a processor and service provider for Customer Data, as described in our Data Processing Addendum.
Before engaging a subprocessor, we review its security and privacy practices and put in place data protection terms no less protective than our own, including Standard Contractual Clauses where required for cross-border transfers. All Customer Data at rest is hosted in the United States.
2.Infrastructure and hostingLink to this section
Providers that host the Services and store Customer Data. All Customer Data at rest is hosted in the United States.
| Provider | Purpose | Data processed | Location | Transfers |
|---|---|---|---|---|
| Amazon Web Services, Inc. | Cloud compute, storage, networking, secrets management, and outbound email (EC2, S3, load balancing, Route 53, Secrets Manager, SES, SNS). | Customer Data, account and organization data, workspace files, and operational logs. | United States (us-east-1) | Standard Contractual Clauses |
| Convex, Inc. | Primary application database, backend functions, and authentication storage. | Account data, organization data, CRM records, chat and workspace content. | United States | Standard Contractual Clauses |
| Vercel Inc. | Web application hosting, edge delivery, durable workflow execution, and bot mitigation. | Request and usage metadata, and Customer Data transiting the application. | United States | Standard Contractual Clauses |
| Daytona | Managed sandbox compute that runs agent workspaces and tasks. | Workspace files, prompts, tool results, and Customer Data made available to a running agent. | United States | Standard Contractual Clauses |
3.AI model providersLink to this section
Providers that perform AI inference on prompts, context, and outputs.
| Provider | Purpose | Data processed | Location | Transfers |
|---|---|---|---|---|
| Anthropic, PBC | Large language model inference (Claude). | Prompts, uploaded context, tool results, and model outputs. | United States | Standard Contractual Clauses |
| OpenAI, L.L.C. | Large language model inference. | Prompts, uploaded context, tool results, and model outputs. | United States | Standard Contractual Clauses |
| Amazon Web Services (Amazon Bedrock) | Managed hosting and routing for foundation models. | Prompts, uploaded context, tool results, and model outputs. | United States (us-east-1) | Standard Contractual Clauses |
4.Functional and supporting providersLink to this section
Providers that support specific product features such as billing, email, analytics, sign-in, integrations, and messaging channels.
| Provider | Purpose | Data processed | Location | Transfers |
|---|---|---|---|---|
| Stripe, Inc. | Payment processing and subscription billing. | Billing contact details and payment metadata. Full card numbers are handled by Stripe and are not stored on our servers. | United States | Standard Contractual Clauses |
| Resend | Transactional email delivery, including sign-in codes and service notices. | Recipient email addresses and email content. | United States | Standard Contractual Clauses |
| PostHog, Inc. | Product analytics and session replay. | Usage events, device and browser metadata, and on-screen activity captured by replay. | United States | Standard Contractual Clauses |
| Google LLC | Authentication when you choose Google sign-in. | Basic Google profile information and email address. | United States | Standard Contractual Clauses |
| Composio | Third-party application integrations, tool execution, and event triggers that you connect. | Connection metadata and the data exchanged with the integrations you authorize. | United States | Standard Contractual Clauses |
| Browserbase, Inc. | Headless browser automation used when an agent browses the web on your behalf. | Page content and the inputs and outputs of an agent browsing session. | United States | Standard Contractual Clauses |
| AgentPhone | iMessage messaging channel delivery for the iMessage interface. | Phone numbers and message content for that channel. | United States | Standard Contractual Clauses |
5.Updates and NotificationsLink to this section
We keep this list current as our stack evolves. When we add or replace a subprocessor that processes Customer Data, we update this page and the effective date above. Customers with a Data Processing Addendum may subscribe to change notifications and may object to a new subprocessor on reasonable data-protection grounds as described there. Questions can be sent to dpa@dench.com.