Sub-processor list
- Last updated
- 18 August 2026
This page lists the sub-processors Curvestone uses to process Customer Data, as defined in our agreements. Each one receives only the data it needs to perform its function, and model training is disabled across every AI provider we use. Transfers outside the UK are made under the mechanism set out in our Data Processing Agreement. Contact dpo@curvestone.io to request more information.
AI models and infrastructure
| Sub-processor | Purpose | Location |
|---|---|---|
| Microsoft Corp | AI provider and cloud services provider | EU, US |
| OpenAI, LLC | AI provider | US* |
| Google Cloud Platform | AI provider | EU, US |
| Amazon Web Services | AI provider | EU, US |
| Anthropic, PBC | AI provider | US* |
| Mistral AI | AI provider | EU* |
*Where a customer has selected EU processing, models from these providers remain available through our hosted platforms, such as Amazon Bedrock and Google Vertex, within the selected region. Mistral AI’s own sub-processors include US-based providers; onward transfers are made under Mistral AI’s transfer safeguards.
Product features
| Sub-processor | Purpose | Location |
|---|---|---|
| SuSea, Inc (you.com)Optional | Web browsing. Disabled by default and used only where a customer opts in. Prompts only | US |
This list may be updated from time to time in accordance with the sub-processor provisions of the Data Processing Agreement. We notify customers before appointing a new sub-processor.