Sub Processors

Applies to: sAIlsbot Beta Access Agreement v2.0 and Data Processing Addendum v1.0

This page lists the sub-processors engaged by Breezee AI Limited (Company No. SC857320) to process personal data on behalf of Controllers under the sAIlsbot Beta Programme. It is maintained in accordance with Clause 4.3 of the Data Processing Addendum.

Registered Beta customers will be notified by email of any changes to this list, with no less than 14 days' notice before a new sub-processor is engaged.

Approved Sub-Processors

OpenAI, L.L.C.

Location: United States of America

Processing purpose: Large language model processing (GPT); generation of AI agent responses and vector embeddings for the knowledge base. AI training uses only Anonymised Platform Data — see Clause 8 of the DPA.

Transfer safeguard: IDTA or UK Addendum to EU SCCs (Processor-to-Processor).

Supabase, Inc.

Location: United States of America

Processing purpose: Database hosting (PostgreSQL + pgvector), authentication, file storage, and serverless edge function execution.

Transfer safeguard: IDTA or UK Addendum to EU SCCs (Processor-to-Processor).

Vercel, Inc.

Location: United States of America

Processing purpose: Frontend application hosting, serverless function execution, and content delivery network.

Transfer safeguard: IDTA or UK Addendum to EU SCCs (Processor-to-Processor).

Langfuse GmbH

Location: Germany (EEA)

Processing purpose: AI observability and tracing: logging of agent conversation metadata and tool call spans for quality monitoring. PII masking applied before export.

Transfer safeguard: No Restricted Transfer — EEA (UK adequacy decision applies).

HubSpot, Inc.

Location: United States of America

Processing purpose: CRM and contact management: storage and synchronisation of prospect and lead data captured via the sAIlsbot agent; sales pipeline management.

Transfer safeguard: IDTA or UK Addendum to EU SCCs (Processor-to-Processor).

Resend, Inc.

Location: United States of America

Processing purpose: Transactional email delivery: sending confirmation emails and platform notifications to authorised dashboard users.

Transfer safeguard: IDTA or UK Addendum to EU SCCs (Processor-to-Processor).

Atlassian, Inc.

Location: United States of America

Processing purpose: Bug tracking and support ticket management; tickets may contain personal data relating to the Controller's end users.

Transfer safeguard: IDTA or UK Addendum to EU SCCs (Processor-to-Processor).

Notes

Transfer mechanisms. Breezee AI ensures that appropriate transfer safeguards (IDTA or UK Addendum to EU SCCs) are in place with each US-based sub-processor prior to any transfer of personal data, and conducts transfer impact assessments as required under Clause 6.3 of the DPA. Documentation is available on request.

Knowledge base ingestion tools. Tools used solely to retrieve publicly available website content or to parse documents uploaded by the Controller for knowledge base ingestion do not process personal data and are therefore not sub-processors within the meaning of the DPA. The Controller is responsible for ensuring that documents and files uploaded for knowledge base ingestion do not contain personal data (see Clause 2.3(d) of the DPA).

Change History

Version 1.0 — 3 May 2026: Initial publication — sub-processors as at DPA v1.0 effective date.

This list is maintained by Breezee AI Limited. For data protection queries, contact privacy@breezee.ai. Full terms are available at breezee.ai/DPA.