1. Introduction
Issei provides AI agents that carry out a company's repetitive operational work inside the tools the company already uses. In the course of providing these services, Issei processes personal data on behalf of its customers. When it does so, Issei acts as a processor and the customer acts as the controller, within the meaning of EU Regulation 2016/679 (GDPR).
To deliver its services, Issei relies on a limited number of carefully vetted third-party providers, known as sub-processors, that process customer personal data on Issei's behalf. This document identifies those sub-processors and the safeguards that apply.
2. How We Engage Sub-processors
We select sub-processors that provide sufficient guarantees to implement appropriate technical and organisational measures. Each sub-processor is bound by a written data processing agreement imposing data protection obligations at least equivalent to those Issei owes to its customers, and Issei remains responsible for their performance in relation to the personal data they process.
Customer data is hosted in Europe. Issei's core hosting and infrastructure are located in the European Union. Where a sub-processor transfers personal data outside the European Economic Area, appropriate safeguards are in place, including the European Commission's Standard Contractual Clauses (Decision 2021/914).
Customer data is not used to train AI models.
3. Relationship With the Data Processing Agreement
The engagement of sub-processors, the technical and organisational security measures, international transfer mechanisms, breach notification, and the detailed rights and obligations of the parties are governed by the Data Processing Agreement (DPA) entered into between Issei and each customer. This document is informational and is subject to that DPA; in the event of any inconsistency, the DPA prevails.
4. List of Sub-processors
The following table lists the sub-processors currently engaged by Issei to process customer personal data.
| Sub-processor | Service / Purpose | Location / Region |
|---|---|---|
| Amazon Web Services (AWS) | Cloud hosting and infrastructure: compute, storage, networking and monitoring for the platform and website. | European Union (Frankfurt, Germany) |
| Supabase | Application database, authentication and realtime services. | European Union (hosted on AWS) |
| Anthropic | Large language model inference powering the AI agents. Customer data is not used to train the models. | United States (hosted on AWS), with Standard Contractual Clauses |
| Amazon SES / SNS (AWS) | Transactional and operational email and notifications sent by the agents on the customer's behalf. | European Union / United States, with Standard Contractual Clauses |
| Kapso | WhatsApp Business API gateway for agent communications over WhatsApp. | European Union / variable, with Standard Contractual Clauses where applicable |
| Stripe | Payment processing and subscription billing. Card data is never stored by Issei. | European Union / United States, with Standard Contractual Clauses |
| Google LLC / Google Ireland Limited | Google Analytics for website analytics; and Google Calendar for demo scheduling. | European Union / United States, with Standard Contractual Clauses |
5. Updates to This List
Issei may update this list of sub-processors from time to time as its services evolve. Where a new sub-processor is added, Issei will provide customers with prior notice in accordance with the DPA, so that customers may exercise any rights of objection set out in that agreement.
6. Contact
For any question about our sub-processors or data processing, you can contact us at hi@issei.ai (English) or hola@issei.ai (Spanish).