Legal

Sub-processors

Last updated 2026-05-06

Ambience relies on the following third-party services to deliver its product. We update this list when we add or remove a vendor. Customers on enterprise plans receive at least 30 days' notice of any change before it takes effect.

Region
VendorPurposeData accessedRegionDPA
AnthropicLLM provider via AI Gateway — extraction, refining, searchMemory bodies + email snippets (transient, no training)USRequest
VercelHosting + AI Gateway routing — serverless computeAll HTTP traffic, function logsUS (iad1)Request
NeonPostgres — primary databaseAll persisted user data (encrypted at rest)US EastRequest
InngestBackground workflows — cron + queuesWorkflow event payloads (org/user IDs, no memory bodies)USRequest
WorkOSAuthKit — SSO, user identityEmail, name, OIDC subject idUSRequest
SonnerUI toast notifications (client-side library, no data leaves browser)Nonen/aRequest

Notification of changes

We'll update this page when we add or remove a sub-processor. For substantive changes (a new vendor handling memory bodies, or a change in data region), customers on enterprise plans receive at least 30 days' advance notice via email to their primary billing contact.

Contact

Questions about our sub-processors or to request a signed DPA: hello@ambience.sh.