Subprocessors
Carefully selected. Continuously evaluated.
Dainin AI works with carefully selected third-party providers that have been evaluated for security, reliability, and privacy. Each subprocessor is subject to contractual obligations that meet or exceed our data protection standards.
Core Infrastructure
Infrastructure Subprocessors
AWS
Cloud infrastructure hosting
Application data, logs
Global
GCP
Compute and infrastructure services
Application data
Global
Stripe
Payment processing
Billing information
US / EU
SendGrid / Postmark
Transactional email delivery
Contact information
US
AI Services
AI & Language Model Providers
The following AI providers may be used depending on customer configuration and feature requirements. Providers marked as "Potential" indicate they may be utilised based on the customer's selected configuration.
OpenAI
Language model processing
US / Global
Anthropic
AI model processing
US
Google AI (Gemini)
AI model processing
Global
Meta AI
AI model processing
Global
Cohere
AI model processing
Global
Mistral AI
AI model processing
EU
Note: Providers marked as "Potential" may be used depending on customer configuration and feature selection. Not all providers are active for every customer. Contact us to confirm which providers are in use for your account.
AI Data Practices
Data Handling with AI Providers
When data is processed through AI providers, the following protections are in place to safeguard customer information.
- No customer data is used to train third-party AI models
- Data is transmitted using encrypted connections (TLS 1.2+)
- API-level access controls with scoped permissions
- No persistent storage of customer data by AI providers beyond processing
- Data processing agreements in place with all active providers
- Regular review of provider security practices and certifications
Due Diligence
Subprocessor Evaluation
All subprocessors undergo a rigorous evaluation process before onboarding, covering the following criteria.
Security Posture
Assessment of security certifications, controls, and incident history.
Data Protection
Review of encryption, access controls, and data handling practices.
Contractual Obligations
Data processing agreements with equivalent protection standards.
Privacy Compliance
Alignment with GDPR and applicable data protection regulations.
Data Residency
Assessment of data storage locations and transfer mechanisms.
Ongoing Monitoring
Regular reviews and reassessment of subprocessor compliance.
Non-Approved Providers
Dainin AI does not engage subprocessors that have not passed our evaluation process. If a provider does not meet our security, privacy, or compliance standards, they are not used in any capacity that involves the processing of customer data.
Change Management
Subprocessor Changes
Customers are notified of changes to the subprocessor list and have the ability to review and object to new subprocessors.
- Advance notice provided before new subprocessors are engaged
- Customers may object to new subprocessors within a reasonable timeframe
- New subprocessors undergo the same evaluation process as existing providers
- This subprocessor list is updated to reflect any changes
Trust Foundation
Infrastructure Certifications
Our core infrastructure providers maintain industry-leading compliance certifications, providing an additional layer of trust.
Amazon Web Services (AWS)
Google Cloud Platform (GCP)
Vendor Subprocessor Applications
Organisations interested in becoming an approved Dainin AI subprocessor may submit an application for review. All applicants are subject to our standard evaluation criteria covering security, privacy, and compliance.
Contact security@dainin.ai for vendor applicationsRelated
Related Security & Privacy Resources
Questions?
Subprocessor Inquiries
For questions about our subprocessors, to confirm which providers are active for your account, or to be notified of subprocessor changes, please contact our security team.
security@dainin.ai