Legal
Products & data recipients
Service providers and subprocessors
Who receives data, for which product, and why.
Last updated:
A provider is listed for its applicable product and feature. Independent payment providers, customer-selected integrations and internal Grid Heap platforms have different roles. A signed DPA determines subprocessor authorization, notices and objection periods; this page does not create a new universal DPA or notice period.
AIRuntime · 11 provider assignments
AIRuntime
Cloudflare
service provider- Purpose
- Website/API delivery, security and the application storage or queues used by the selected feature.
- Data
- Technical requests, IP addresses and applicable application content.
- Conditions
- Applies only to the named product and the feature described here.
AIRuntime
Adobe Fonts
font delivery provider- Purpose
- Delivery and licensing of hosted interface fonts.
- Data
- IP address and browser request information; no application file contents.
- Conditions
- Applies only to the named product and the feature described here.
AIRuntime
Clerk
service provider- Purpose
- Authentication, session management and applicable organization membership.
- Data
- Account, sign-in, profile and session identifiers.
- Conditions
- Applies only to the named product and the feature described here.
AIRuntime
Microsoft Azure
service provider- Purpose
- Production Azure PostgreSQL, selected GPU/model deployment and managed privacy-filter compute.
- Data
- Application content and technical records needed for the applicable feature.
- Conditions
- Applicable platform database or selected managed Azure model deployment; other cloud editions remain distinct.
AIRuntime
Amazon Web Services
service provider- Purpose
- Selected AWS runtime edition, deployment/storage infrastructure or transactional email.
- Data
- Account and application records, technical metadata and email content needed for the applicable feature.
- Conditions
- Only the selected AWS-hosted feature or configured email transport.
AIRuntime
Stripe
payment provider; independent controller for its own obligations- Purpose
- Checkout, payments and related billing administration.
- Data
- Billing/contact information, payment credentials and transaction records.
- Conditions
- Applies only to the named product and the feature described here.
AIRuntime
Sentry
service provider- Purpose
- Application error and performance monitoring.
- Data
- Technical/error and performance metadata, including identifiers permitted by the product’s diagnostic settings.
- Conditions
- Applies only to the named product and the feature described here.
AIRuntime
OpenAI
service provider- Purpose
- Selected text, image, embedding or audio model processing through AI Runtime.
- Data
- Inputs and context submitted to the selected model feature and its output.
- Conditions
- Applies only to the named product and the feature described here.
AIRuntime
DeepSeek
service provider- Purpose
- Selected DeepSeek models through the direct provider API.
- Data
- Model request inputs, context and output.
- Conditions
- Only a direct DeepSeek API route. A DeepSeek model served by Fireworks sends model data to Fireworks instead; route and fallback selection determine the recipient.
AIRuntime
Fireworks AI
service provider- Purpose
- Hosting selected model requests through AI Runtime.
- Data
- Model request inputs, context and output.
- Conditions
- Only a selected Fireworks-hosted model route, including the documented DeepSeek peak/fallback paths. Model branding alone does not identify the host.
AIRuntime
Moonshot AI
service provider- Purpose
- Selected Kimi model requests through AI Runtime.
- Data
- Model request inputs, context and output.
- Conditions
- Only selected Kimi routes with configured central credentials; not an authorization for every model in the adapter catalogue.
Processing locations depend on the service, enabled feature and selected deployment. Listed locations apply to the identified deployment, rather than every service offered by that provider. Our Privacy Policy explains international transfers and applicable safeguards.
Grid Heap, Inc. · 1111B S Governors Ave Ste 51059, Dover, DE 19904, United States. Questions: legal@gridheap.com.