Sub-processors
Last updated: 1 September 2026
To deliver the Pensieve service we share data with the vetted third-party sub-processors listed below. Each is engaged under terms that require appropriate security and confidentiality, and that prohibit using your content to train their own models.
| Sub-processor | Purpose | Location |
|---|---|---|
| Supabase | Database, authentication and file storage | European Union (AWS, Paris) |
| Google Cloud Platform | Database hosting for your context layer | United Kingdom (London) |
| Railway | Application hosting | United States |
| Nango | Managed OAuth and connector synchronisation | United States |
| OpenRouter | AI gateway — every model, embedding and web-search request is routed through it | United States |
| OpenAI | AI model processing and text embeddings, reached via OpenRouter | United States |
| Anthropic | AI model processing, reached via OpenRouter | United States |
| Firecrawl | Web page retrieval for the website connector and the agent's web fetches | United States |
| Stripe | Subscription billing and payment processing | United Kingdom and United States |
| Mux | Video hosting for demo and marketing pages | United States |
| PostHog | Product analytics and error tracking | European Union (Frankfurt) |
| OnePatch | Application performance monitoring — traces, metrics, logs and error diagnostics | United States |
| Resend | Transactional email | United States |
International transfers
Our primary data stores — the database, file storage and your context's context layer — are hosted in the UK/EU. Some sub-processors (in particular our AI model providers) are based in the United States, so delivering the service involves transferring data outside the UK/EU. Where this happens we rely on Standard Contractual Clauses and equivalent safeguards.
Changes
We will update this page before engaging a new sub-processor and aim to give at least 30 days' notice of material changes. Questions? Contact us at euan@pensieve.uk.
See also our Privacy Policy.