Legal
Third-party sub-processors that process customer or personal data
Last updated: July 8, 2026
Last Updated: July 8, 2026
This page lists the third-party sub-processors SnowCoder (Kumoco Limited) engages to process customer or personal data. We notify customers of material changes under the Data Processing Agreement.
| Sub-processor | Purpose | Data processed | Location |
|---|---|---|---|
| Amazon Web Services | Hosting, database, object storage, secret management | All platform data | EU (London, eu-west-2) |
| Cloudflare | CDN, WAF, edge security, AI Gateway | Request/traffic metadata; LLM request traffic | Global edge |
| Anthropic | LLM inference (Claude), via Cloudflare AI Gateway | Requirement text, conversation, ServiceNow metadata, file extracts (credentials excluded) | US (standard tier) |
| OpenAI | Text embeddings (retrieval) | Text to be embedded | US |
| Stripe (incl. Stripe Tax) | Payments & billing | Billing / account details | US / global |
| Xero | Accounting / invoicing | Invoice and contact details | Global (NZ/AU/US) |
| Google (Gmail / Workspace SMTP) | Transactional email | Recipient email, message content | US / global |
| Telegram | Operational error alerting | Error messages / stack traces (may incidentally include an email) | Global |
| UptimeRobot | Uptime monitoring | Endpoint URLs only (no customer data) | US |
Enterprise+ dedicated deployments: AI inference can be provisioned in-region via AWS Bedrock (built per engagement); OpenAI is not used and there is no payment sub-processor on that tier.
Standard-tier AI inference (Anthropic, OpenAI) and transactional email egress to the US under Standard Contractual Clauses / the UK Addendum.