Last updated 2026-06-05.
This is the live, authoritative list of every sub-processor that handles your data on Aeoniti's behalf. We notify customers 30 days in advance of any addition via the in-product changelog and an email to the account contact.
| Provider | Purpose | Region | Data shared | Compliance |
|---|---|---|---|---|
| Cloudflare, Inc. | Edge / DNS / TLS / WAF / CDN | Global edge | All HTTPS traffic to *.aeoniti.com (URLs, IPs, headers) | SOC 2 Type II, ISO 27001, GDPR DPF |
| Dodo Payments Inc. | Payment processing for US/EU customers | United States (Delaware) | Name, billing address, card last4, transaction history | PCI-DSS Level 1, SOC 2 Type II |
| Mailsetu | Transactional email — operated by Networkers Home on our own infrastructure (no external sub-processor for email) | Paris (EU) | Email address, message body of system notifications (verification, password reset, billing alerts) | Inherits parent's tier-3 datacenter SLAs |
| OpenRouter LLC | LLM gateway for ChatGPT (GPT-5.4-nano), Gemini (3.5 Flash), and Google AI Overview (via Perplexity Sonar) | United States | Brand name + buyer-intent query only, no customer PII | Inherits underlying provider compliance (OpenAI, Google, Perplexity DPAs) |
| DataForSEO LP | SERP data, Knowledge Graph, People Also Ask, AI Overview; also narrow-scope SERP + Google AI Overview fallback when our primary path is unavailable | United States + Cyprus | Brand name + buyer-intent query strings only, no customer PII | GDPR + CCPA aligned, SOC 2 in progress |
| Tavily | Live web grounding for the chat brain | United States | Your chat questions when they trigger live search (3-second deadline; otherwise skipped) | GDPR aligned |
| Google LLC (Search Console OAuth) | Read-only Search Console integration (only when YOU connect it) | Global | OAuth refresh token (encrypted at rest with AES-256-GCM); GSC query data when you fetch | SOC 2, ISO 27001, GDPR DPF |
| Networkers Home (parent company) | Underlying VM hosting + Postgres + R2-compatible object storage | Paris + Frankfurt (EU) | Everything stored on our servers | Aligned with parent's tier-3 datacenter SLAs |
Want to be notified by email when this list changes? Email [email protected] with subject "Sub-processor watchlist" — we'll add you and email 30 days before any new addition.