Cloud infrastructure
- Amazon Web Services (AWS) — compute, storage, database, caching, secrets management, monitoring. Primary processing region: US East (Ohio, us-east-2). Privacy policy: aws.amazon.com/privacy
Authentication
- Clerk — user authentication and identity management. Privacy policy: clerk.com/legal/privacy
AI model and embedding providers
- OpenAI — language model and embedding APIs for claim extraction, chat, and document indexing. Privacy policy: openai.com/enterprise-privacy
- OpenRouter — language model gateway used for claim verification calls. Privacy policy: openrouter.ai/privacy
Document parsing
- Landing AI — parses uploaded documents into structured text. Configured for zero data retention: documents are processed in memory, are not stored at rest by Landing AI or its sub-processors, are discarded after processing, and are not used to train Landing AI’s models. Privacy policy: landing.ai/privacy-policy
Web content extraction
- Tavily — fetches and extracts the content of a webpage when you save it as a source. Privacy policy: tavily.com/privacy
AI observability
- LangSmith (LangChain, Inc.) — monitors and traces AI workflows for debugging and quality assurance. Receives prompts, AI responses, and related document fragments with associated metadata. Privacy policy: langchain.com/privacy-policy
Web analytics
- Contentsquare — web application session analytics. Configured to mask all text, digits, and form inputs. Used on the web application only; not loaded by the Chrome extension. Privacy policy: contentsquare.com/privacy-center/services-privacy-policy
Questions about our sub-processors? Email info@cothonai.com.