Legal
Subprocessors
Who helps run Anthenos, and what each one does.
Effective Last updated
Aethric LLC uses a small number of providers to run Anthenos. Each processes data only to provide its part of the service, under its own terms. This page lists them; the Privacy Policy and the Data Processing Addendum explain how they fit in.
What a subprocessor is
A subprocessor is a third party that Aethric engages to process personal information on behalf of our customers as part of providing Anthenos. We share with each only what its purpose needs.
Current subprocessors
| Provider | Purpose | Processing location | More information |
|---|---|---|---|
| To be confirmed by Aethric LLC: the cloud hosting and database provider | Cloud hosting and database: runs Anthenos’s servers and background workers, stores its PostgreSQL database (including uploaded documents and encrypted credentials), and keeps its server logs. | To be confirmed by Aethric LLC: the hosting region | — |
| Stripe | Payment processing: subscriptions, checkout, invoices and the billing portal. Receives the paying person’s email address and the workspace and plan being paid for; card details are given to Stripe directly. | United States, and other countries where Stripe operates | stripe.com/privacy |
| OpenRouter | AI model routing: forwards model requests — the work being done, extracted document text, and cleaned descriptions of portal pages — to hosted models. Anthenos asks it to use only model providers that state they do not retain or train on request data. | United States | openrouter.ai/privacy |
| The model providers OpenRouter routes to | AI models: answer the requests OpenRouter forwards. Which provider serves a request depends on the model and on OpenRouter’s routing. | Varies by provider | openrouter.ai/docs |
| Composio | Connected accounts: makes the connections to email and business applications a customer chooses to connect, holds the access they grant, and carries out the reads and actions a workflow asks for in them. | Not yet confirmed | composio.dev |
| Authentication: confirms who you are when you choose “Continue with Google”, and returns your Google account identifier, email address and name. | United States, and other countries where Google operates | policies.google.com/privacy |
Used only when enabled
Anthenos can be configured to use these providers for particular features. They receive data only where that feature is switched on for the service.
| Provider | Purpose | Processing location | More information |
|---|---|---|---|
| OpenAI | AI models used directly instead of through OpenRouter; transcription of audio a person attaches to work; description of attached images. | United States | openai.com/policies |
| Anthropic | AI models used directly instead of through OpenRouter; description of attached images. | United States | anthropic.com/legal/privacy |
| A web search provider: Brave Search, Tavily, Serper or Exa | Web search, where a workflow needs to look something up. Receives only the search words, never anything about you or your workspace. | Varies by provider | — |
On our website
Whop measures which of our ads and pages lead to sign-ups and purchases, through a pixel that runs on our public pages only if a visitor allows marketing, and never inside a workspace. It does not receive Customer Content. The Cookie Policy says exactly what it collects. whop.com/privacy
What is not a subprocessor
The customer portals, ERP systems, email accounts and other systems a customer connects or instructs Anthenos to work in are chosen and controlled by the customer, and process data under the customer’s own arrangements with them. They are not Aethric’s subprocessors.
Changes to this list
We update this page before a new subprocessor begins processing Customer Content. The date at the top says when it last changed. Customers who have agreed to our Data Processing Addendum may object to a new subprocessor as the addendum describes. Questions go to hello@aethric.llc.