Agerra · Legal
Providers & Subprocessors
Last updated: 16 October 2026
This document is currently provided in English across all site languages.
This register describes integrations present in Agerra. Not every provider processes every customer’s data: use depends on enabled features, chosen models, and supplied credentials. The contracting entity and processing locations depend on the applicable provider agreement and account; this list does not promise EU-only processing.
Customer-content processing services
DigitalOcean
Private VPS hosting of the Agerra application, confirmed by the operator. The selected region, PostgreSQL location, and backup and log arrangements must be confirmed for the deployment.
Official provider informationOpenAI
AI responses for selected models; source and query embeddings independently of the selected chat model. Prompts, conversation context, source text, and tool results as needed.
Official provider informationAnthropic
AI responses when a Claude model is selected; prompts, context, and tool results as needed.
Official provider informationGoogle Gemini API
AI responses when a Gemini model is selected. Data-use rules depend on applicable service terms and account configuration; Google Cloud terms should not be assumed to apply to every Gemini API account.
Official provider informationAmazon Web Services (S3)
Storage of uploaded source files and agent logos. Object storage region depends on deployment configuration.
Official provider informationTrigger.dev
Background processing of file, text, website, and question-and-answer sources; job payloads, source content, and execution logs as needed.
Official provider informationFirecrawl
Website ingestion when URL sources are used; submitted URLs and extracted page content.
Official provider informationSentry
Application errors and performance monitoring; technical diagnostics and potentially request or error context.
Official provider information
Billing, authentication, analytics, and customer-selected services
These providers are not all subprocessors under the customer DPA. Their role depends on the processing purpose and who contracts with them.
Stripe
Subscription checkout, billing portal, invoices, payment and tax information. Stripe acts as processor or independent controller depending on the activity.
Official provider informationGoogle sign-in
Optional authentication; Google profile information and authentication tokens.
Official provider informationGoogle Analytics
Consent-based website usage analytics and device identifiers.
Official provider informationMicrosoft Clarity
Consent-based interaction analysis and session recordings.
Official provider informationMeta / WhatsApp
Customer-enabled WhatsApp messaging, phone and channel identifiers, messages and delivery events. Provider roles depend on the applicable WhatsApp terms.
Official provider informationCustomer-selected tools, webhooks, and content
Configured external APIs, Stripe tools, Instantly tools, YouTube embeds, and other destinations receive the data specified by the customer. Consult the destination’s terms before enabling it.
Official provider informationjsDelivr
Delivery of the cookie consent stylesheet; network requests expose IP and browser request information to the CDN.
Official provider information
Deployment details and changes
The Agerra application runs on a private VPS hosted by DigitalOcean. A private VPS does not by itself establish EEA-only processing. The selected VPS region, PostgreSQL operator and location, operational log storage, backups, retention, and applicable transfer safeguards still need deployment-specific confirmation. Contact andrei@asynnc.com for the deployment-specific register and processing agreements before sending data with contractual residency requirements.
For customer data, subprocessor authorization, advance change notification, and objections are governed by the DPA. Customer-configured destinations should be reviewed separately by the customer. Official policy links are provided for transparency; they do not replace executed contracts or transfer safeguards.