Sub-processors
Version 1.0 · Effective as of May 18, 2026
In compliance with the LGPD, we disclose below the functional categories of sub-processors used to deliver the Service. The full nominal list (corporate name, registration number, and country of processing) is available upon request to the Data Protection Officer at noreplywitboardai@gmail.com. All sub-processors are bound by data processing agreements (DPAs) that restrict their use of Customer data to the purposes listed.
| Category | Function | Data Processed | Processing Region |
|---|---|---|---|
| Authentication provider | Identity and session management | Email, name, session data | United States |
| Payments processor | Billing and subscription management | Name, email, billing details | United States |
| Generative AI provider (primary) | Language models for the AI agent | Prompt, issue, and chat content | United States |
| Generative AI provider (secondary) | Alternative language models | Prompt, issue, and chat content | United States |
| Transactional email provider | Email notification delivery | Email address, message content | United States |
| File storage provider | Hosting of Customer-uploaded attachments | Uploaded files | United States |
| Application hosting and CDN provider | Application delivery to end users | Request metadata, IP address | Global |
| Database provider | Primary storage of structured data | Customer and user data | United States |
This list is updated whenever a new sub-processor category is added or removed. Material changes will be communicated via email with at least 30 days advance notice. The current nominal list may be requested at any time from the Data Protection Officer.