Sub-processor List
[ VERSION 1.1 // EFFECTIVE MARCH 31, 2026 ]
Overview
Rogue Active Intelligence Inc. ("RogIQ") uses certain third-party sub-processors to help us provide the Platform and Services. A sub-processor is a third party that processes personal data on our behalf in connection with the Services.
This list is maintained pursuant to RogIQ's Data Processing Agreement (DPA) and applicable data protection laws. We will notify customers of material changes to this list in accordance with the DPA. To receive notifications of updates to this list, please [subscribe here] or contact [[email protected]].
For questions about sub-processors, please contact: [[email protected]]
Sub-processor List
Artificial Intelligence / Machine Learning
| Sub-processor | Jurisdiction | Purpose | Transfer Mechanism |
|---|---|---|---|
| OpenAI, L.L.C. | USA | AI language model processing, content generation, natural language understanding | SCCs; EU-U.S. DPF |
| Anthropic, PBC | USA | AI language model processing, content generation | SCCs; EU-U.S. DPF |
[Note: Review and update AI providers based on actual integrations deployed in the Platform. Add or remove providers as applicable.]
Cloud Infrastructure and Hosting
| Sub-processor | Jurisdiction | Purpose | Transfer Mechanism |
|---|---|---|---|
| Amazon Web Services (AWS) | USA (Global) | Cloud hosting, storage, computing infrastructure, database services | SCCs; AWS Service Terms; EU-U.S. DPF |
| Google Cloud Platform | USA (Global) | Cloud hosting, storage, computing, backup services | SCCs; Google Cloud Data Processing Addendum; EU-U.S. DPF |
| Cloudflare, Inc. | USA | Content delivery network (CDN), DDoS protection, DNS, security | SCCs; EU-U.S. DPF |
Database and Vector Storage
| Sub-processor | Jurisdiction | Purpose | Transfer Mechanism |
|---|---|---|---|
| Pinecone Systems, Inc. | USA | Vector database for AI memory and search functionality | SCCs |
| MongoDB, Inc. (if applicable) | USA | Database services | SCCs |
[Note: Update with actual database providers.]
Payments and Financial Services
| Sub-processor | Jurisdiction | Purpose | Transfer Mechanism |
|---|---|---|---|
| Stripe, Inc. | USA | Payment processing, subscription billing, fraud prevention | SCCs; Stripe Data Processing Agreement; EU-U.S. DPF |
Communications and Messaging
| Sub-processor | Jurisdiction | Purpose | Transfer Mechanism |
|---|---|---|---|
| Twilio, Inc. | USA | SMS, phone, and communications services | SCCs; EU-U.S. DPF |
| SendGrid (Twilio) | USA | Transactional and marketing email delivery | SCCs; EU-U.S. DPF |
| Intercom, Inc. (if applicable) | USA | In-app customer support chat and messaging | SCCs; EU-U.S. DPF |
Analytics and Monitoring
| Sub-processor | Jurisdiction | Purpose | Transfer Mechanism |
|---|---|---|---|
| Google Analytics | USA | Platform usage analytics, user behavior analysis | SCCs; EU-U.S. DPF |
| Google Search Console | USA | Search performance monitoring | SCCs; EU-U.S. DPF |
| Sentry, Inc. | USA | Error monitoring and performance tracking | SCCs |
| Datadog, Inc. (if applicable) | USA | Infrastructure and application monitoring | SCCs; EU-U.S. DPF |
CRM and Business Integrations
| Sub-processor | Jurisdiction | Purpose | Transfer Mechanism |
|---|---|---|---|
| HubSpot, Inc. | USA | CRM integration, marketing automation | SCCs; EU-U.S. DPF |
| Salesforce, Inc. | USA | CRM integration | SCCs; EU-U.S. DPF |
| LinkedIn Corporation | USA | Social media integration, ads | SCCs; EU-U.S. DPF |
| Zoom Video Communications | USA | Video conferencing integration | SCCs; EU-U.S. DPF |
[Note: Only list CRM integrations that are natively built into the Platform. Third-party integrations connected by customers are not RogIQ sub-processors.]
Content Creation and Creative Tools
| Sub-processor | Jurisdiction | Purpose | Transfer Mechanism |
|---|---|---|---|
| Bannerbear, Ltd. (if applicable) | USA/Global | Automated image and video generation | SCCs |
| Handwrytten, Inc. (if applicable) | USA | Automated handwritten note creation | N/A (U.S. only) |
Social Media Publishing
| Sub-processor | Jurisdiction | Purpose | Transfer Mechanism |
|---|---|---|---|
| NetSocial / UploadPost (if applicable) | USA | Social media post scheduling and publishing | SCCs |
SEO and Performance
| Sub-processor | Jurisdiction | Purpose | Transfer Mechanism |
|---|---|---|---|
| SEOptimer (if applicable) | Australia | SEO performance analysis and reporting | SCCs |
Customer Support and Success
| Sub-processor | Jurisdiction | Purpose | Transfer Mechanism |
|---|---|---|---|
| Zendesk, Inc. (if applicable) | USA | Customer support ticketing | SCCs; EU-U.S. DPF |
International Data Transfer Mechanisms
RogIQ transfers personal data to sub-processors located outside the European Economic Area (EEA), United Kingdom, or other countries with data protection laws that restrict international transfers. Where such transfers occur, RogIQ relies on one or more of the following mechanisms:
- Standard Contractual Clauses (SCCs): European Commission Standard Contractual Clauses (Module 2: Controller-to-Processor or Module 3: Processor-to-Sub-processor) incorporated into data processing agreements with sub-processors.
- EU-U.S. Data Privacy Framework (EU-U.S. DPF): Where sub-processors are certified under the EU-U.S. DPF, UK Extension, or Swiss-U.S. DPF.
- Adequacy Decisions: For transfers to countries recognized as providing adequate data protection by the European Commission.
Copies of applicable transfer mechanisms are available upon request at [[email protected]].
Notification of Changes
RogIQ will notify customers of material additions or changes to this Sub-processor List at least fourteen (14) days before the change takes effect, in accordance with the DPA. Customers who object to a new sub-processor may do so in accordance with the procedures outlined in the DPA.
To subscribe to sub-processor change notifications, please [click here] or email [[email protected]].
Contact
For questions about sub-processors or data transfers:
Rogue Active Intelligence Inc. ATTN: Privacy Team [ADDRESS] Email: [[email protected]]
[Note for publication: Before publishing, verify all sub-processors listed are actually engaged by RogIQ. Remove providers marked "(if applicable)" that are not in use. Add any providers not listed here. Confirm transfer mechanisms with your legal counsel.]