tamats
Get started
Back to Home

Data Processing & Subprocessors

How Tamats processes customer data on your behalf, and the categories of subprocessors it uses.

Last updated July 17, 2026

1. Roles

For personal data contained in the content you submit to the service (“customer data”), you are the controller and Axion AI Lab is the processor, acting on your documented instructions — which are your configuration and use of the service. For account and billing data, Axion AI Lab is the controller as described in the Privacy Policy.

2. Processing terms

  • Purpose & duration. We process customer data only to provide the service, for as long as your account is active and as described in the Privacy Policy.
  • Confidentiality. Personnel with access are bound by confidentiality obligations.
  • Security. We maintain technical and organizational measures including organization-scoped row-level security, encryption in transit, least-privilege access and audit logging.
  • Subprocessors. You authorize subprocessors in the categories listed below; we impose data-protection terms on each and remain responsible for their performance. The named vendor list is provided with a countersigned DPA on request.
  • Assistance. We help you respond to data-subject requests and, where required, with security, breach notification and impact assessments.
  • Deletion. On termination we delete or return customer data as described in the Privacy Policy, subject to legal retention.
  • Transfers. Where data is transferred internationally we rely on Standard Contractual Clauses or an equivalent mechanism.

3. Subprocessor categories

We use a small set of vetted infrastructure providers in the categories below. The current named list — including each vendor’s role, location and data-protection terms — is available to customers and prospective customers with a countersigned DPA: email team@tamats.org.

CategoryPurposeLocation
Cloud database, authentication & file storageStores workspace data, handles sign-in and file uploadsUnited States / EU
Application hosting & CDNRuns the apps and serves trafficUnited States (global edge)
AI model providerLarge-language-model inference for the research agentUnited States
Identity providerOAuth sign-inUnited States
Product analyticsUsage analytics, only with your consentUnited States / EU
Payment provider (merchant of record)Payments, invoicing and subscription billingUnited Kingdom
Email deliveryTransactional and invite emailUnited States

4. Changes and contact

We will notify customers holding a countersigned DPA before adding or replacing a subprocessor that processes customer data, and update this page when a change affects the categories above. To request the named subprocessor list and a countersigned DPA, ask about transfer safeguards, or object to a new subprocessor, email team@tamats.org.