Legal

Sub-processors

Last updated: May 4, 2026

SevenBelow, LLC engages the following sub-processors to operate the ComplyOS platform and related services. We require each sub-processor to maintain appropriate technical and organizational measures, to process personal information only as instructed, and to refrain from using Customer Content for AI model training.

We may update this list as our service stack evolves. After general availability, we will provide affected customers with at least 30 days’ advance notice of new sub-processors via email or in-product notification. During the beta period, this page is the authoritative source.

Sub-processorPurposeData ProcessedLocationDPA
Google Cloud PlatformInfrastructure, database, observabilityAll hosted data including Customer Content, account data, logsUnited States (us-west)Link
VercelMarketing site and frontend hostingWeb request data, marketing site interactionsUnited StatesLink
CloudflareCDN, DNS, edge securityIP address, request metadata, edge cache contentGlobal (primary: US)Link
ClerkAuthentication and identityEmail, password hashes, SSO identity assertions, session metadataUnited StatesLink
StripePayment processingBilling email, company name, payment method (card data held by Stripe)United StatesLink
SentryError monitoringError events, stack traces, user IDs, request metadataUnited StatesLink
OneSignalTransactional and notification deliveryEmail address, notification tokens, delivery metadataUnited StatesLink
AnthropicAI model inference (Claude)Inference inputs and outputs derived from Customer Content; not used for model trainingUnited StatesLink
OpenAIAI model inferenceInference inputs and outputs derived from Customer Content; not used for model trainingUnited StatesLink
Amplitude or PostHog (planned)Product analyticsUsage events, anonymized identifiersUnited States
AttioCustomer relationship management (sales/marketing contacts)Business contact information, communication metadataUnited StatesLink
Loops.soWaitlist and marketing email deliveryEmail address, opt-in status, engagement metadataUnited StatesLink
Zendesk (planned)Customer support ticketingSupport communications, contact informationUnited States

AI sub-processors and model training

We do not use Customer Content to train, fine-tune, or improve any AI or machine learning model. Our AI sub-processors (Anthropic, OpenAI) are configured so that customer data submitted via their APIs is not used for model training.

Standard Contractual Clauses

Where personal information is transferred internationally, we rely on appropriate safeguards including the European Commission’s Standard Contractual Clauses or equivalent mechanisms in our agreements with sub-processors.

Questions

For questions about this list or to request additional information, contact privacy@sevenbelow.com.