Subprocessors
Effective Date: 2026-07-04
This page lists the third parties BriefBank engages to process data in providing the Service, as referenced in the Terms of Service (§3.5) and the Data Processing Addendum (Annex III). BriefBank provides at least 30 days' advance notice of new subprocessors by email to each Account's administrative email on file, with an objection right under Terms §3.5.
| Subprocessor | Service / Purpose | Data processed | Region | Retention & training posture | DPA / terms |
|---|---|---|---|---|---|
| Microsoft | Azure OpenAI inference + embeddings; Azure Container Apps hosting; Azure Blob; Azure PostgreSQL | Customer Content, prompts/responses, embeddings, raw files, database records, account/org/auth data, metadata | United States (westus) at rest; some inference uses Global/multi-region model deployments | Not used for model training; stateless models; default abuse-monitoring sample ≤30 days unless modified abuse monitoring approved (not currently) | Microsoft Products & Services DPA |
| Anthropic | Claude via Azure AI Foundry | Prompts/responses and context sent for inference | Via Azure AI Foundry (US resource; Global deployment routing for inference) | No training by default; ~30-day operational/safety retention (flagged longer); not Azure OpenAI zero-retention | Anthropic Commercial Terms (incorporating Anthropic's DPA) |
| Perplexity | Optional web search (off by default) | Model-formed query string only (no documents or chat history) | United States | BriefBank calls Perplexity's Sonar API: no training on customer content is contractual (Perplexity API Terms §2.3.3), and non-retention is per Perplexity's published Zero Data Retention Policy for the Sonar API, as acknowledged in its API terms; pre-send PII redaction not yet built (defense-in-depth item) | Perplexity API Terms (DPA auto-incorporated); feature is disabled by default and engaged only when an organization enables web search |
| PostHog | Product analytics | Numeric/ID allowlisted analytics; no Customer Content intentionally sent | United States (PostHog US Cloud) | No content; training not applicable; retention per workspace configuration | PostHog DPA |
| Azure Communication Services | Transactional email | Email addresses; transactional email content/metadata | United States | Per Microsoft DPA/configuration; training not applicable | Microsoft Products & Services DPA |
| Stripe | Billing / payments | Billing and payment data (not Customer Content) | United States (global payment operations) | Per Stripe DPA | Stripe DPA |
To receive notice of changes to this list, or to object to a new subprocessor for material data-protection reasons, contact info@aibriefbank.com.