Sub-processors
This page lists the third-party organisations ("sub-processors") that Cogitait Ltd uses to help provide the Carys platform, and that may process personal data on our behalf. Each sub-processor is engaged under a written contract that requires it to protect personal data and to process it only on our instructions. International transfers are covered by the safeguards described in section 6 of our Privacy Policy.
Last updated: 1 July 2026
Infrastructure and hosting
| Sub-processor | Purpose | Primary processing location |
|---|---|---|
| Amazon Web Services (AWS) | Cloud hosting, compute, databases, object storage, networking, and content delivery for the platform | European Union (Ireland) |
The platform, its databases, and stored files are hosted on AWS in the EU (Ireland) region. Our own internal services — including the analytical query sandbox and data proxy — run within this AWS environment and are not separate third parties.
AI model processing
Analytical work is performed by AI models accessed through the enterprise platforms below. All are contractually bound to zero data retention: your content is not stored by them and is not used to train models.
| Sub-processor | Purpose | Primary processing location |
|---|---|---|
| Microsoft Azure (Azure AI Foundry) | Hosted AI model processing | European Union / global |
| Google Cloud (Vertex AI) | Hosted AI model processing | Global |
| Amazon Web Services (Amazon Bedrock) | Hosted AI model processing | European Union / United States |
The underlying models provided through these platforms include those from Anthropic (Claude) and OpenAI (GPT), operated under the zero-retention terms above.
Communications and support
| Sub-processor | Purpose | Primary processing location |
|---|---|---|
| Resend | Transactional and service emails (for example account verification and notifications) | United States / European Union |
| Freshworks (Freshdesk) | Customer support ticketing, where you contact us for help | European Union / global |
| Meta Platforms (WhatsApp Cloud API) | Delivering optional WhatsApp notifications, only where you or your organisation choose to enable them | Global |
Billing
| Sub-processor | Purpose | Primary processing location |
|---|---|---|
| Stripe | Payment processing and subscription billing | United States / European Union |
Product features
| Sub-processor | Purpose | Primary processing location |
|---|---|---|
| Mapbox | Rendering maps and geospatial visualisations within reports | United States |
We review this list as our services change. When we add or replace a sub-processor that processes personal data, we update this page. For questions about our sub-processors, contact us at info@cogitait.com.