Know exactly where your data is and how it is being used.
Prospera's subprocessors.
| Name | Purpose | Location | Data Retention | Trust Center |
|---|---|---|---|---|
| AWS | Infrastructure, compute, storage, OCR | Canada (ca-central-1) | Per our policy. Textract: zero retention. No training per DPA/ZDR. | aws.amazon.com/compliance |
| Neon | Primary database (OPT model) | Canada (ca-central-1) | Per our policy. Deleted on termination per DPA. | neon.tech/trust-center |
| OpenAI | AI analysis. Zero data storage. | United States | 0 days. No retention per enterprise API terms and DPA. | trust.openai.com |
| Anthropic | AI analysis. Zero data storage. | United States | 0 days. No retention per commercial API terms and DPA. | trust.anthropic.com |
| Pinecone | Vector storage and semantic search | United States (AWS) | Per our policy. Deleted on termination per DPA. | security.pinecone.io |
| Snowflake | Data warehousing (Standard/Professional) | United States | Per our policy. Deleted on termination per DPA. | snowflake.com/trust-center |
| Fivetran | Automated data ingestion | United States | 0 days. Pass-through only. | fivetran.com/trust-center |
| Airbyte | Enterprise ETL operations | Customer's location | 0 days. Pass-through only. | airbyte.com/security |
| Stripe | Payment processing | United States | Per Stripe policy. Billing only. | stripe.com/trust-center |
| Auth0 (Okta) | User authentication | United States | Session data only. | auth0.com/trust-center |
| Slack | Internal collaboration | United States | Per Slack policy | slack.com/trust |
| Notion | Knowledge base | United States | Internal docs only | notion.so/trust |
| Linear | Development management | United States | Internal data only | linear.app/trust |
| Granola | Meeting documentation | United States | Internal meeting data only | granola.so |
| Google Workspace | Internal operations | United States | Per Google policy. No training per DPA/ZDR. | workspace.google.com/trust |
| Okta | Employee identity management | United States | Session data only | okta.com/trustandcompliance |
| Google Cloud | Supplementary cloud services | US or Customer's location | Per our policy. No training per DPA/ZDR. | cloud.google.com/security/compliance |
| Supabase | [PHASING OUT] Legacy platform | US (AWS us-east-1) | Being migrated to Neon PostgreSQL | supabase.com/security |