Sub-processors
Third parties that process customer data on KONDWIT’s behalf. Any addition or material change triggers a 30-day advance notification to subscribed customers.
| Name | Purpose | Data | Location | DPA |
|---|---|---|---|---|
| Microsoft Azure | Hosting (Container Apps, Postgres, Key Vault, Redis, Container Registry, Log Analytics) | All | US (Central US) | DPA |
| Neo4j (Aura) | Graph database | Derived metadata | US (Google Cloud, us-central1) | DPA |
| Anthropic | LLM (Claude) provider | User prompts (per opt-in) | US | DPA |
| OpenAI | LLM provider (per route) | User prompts (per opt-in) | US | DPA |
| Azure Communication Services (Email) | Transactional email (Azure-native; covered by the Microsoft Azure sub-processor entry but listed for clarity) | Email addresses, transactional message content | Same Azure region as primary infra | DPA |
| Stripe | Billing | Cardholder data (Stripe-vaulted), customer billing info | US (Stripe-managed) | DPA |
| Langfuse (self-hosted) | LLM observability. LISTED, but no active deployment found as of 2026-08-11 - no Langfuse container app exists in the subscription, no LANGFUSE_* environment variable is set on kondwit-api, and no Langfuse credential exists in Key Vault. Pending confirmation. | LLM prompts/completions (per opt-in), traces, if and when the deployment is confirmed active | Same region as primary infra | DPA |
| Azure Monitor (Application Insights) | Observability + alerting | Request metadata, redacted exceptions | Same Azure region | DPA |
Subscribe to changes
Get notified 30 days before any change to the sub-processor list. One email per change; unsubscribe anytime by emailing security@kondwit.com.