Version 2026-09 · Effective September 1, 2026
This is the authoritative list of the third parties that process data to run Anycast. It is referenced by our Privacy Policy, our Terms, and any data-processing agreement. We give notice before adding a subprocessor that handles workspace content.
| Subprocessor | Location | Purpose | Data |
|---|---|---|---|
| Google Cloud | United States | Hosting, storage, backups | All service data, encrypted at rest |
| Anthropic | United States | AI model processing | Content sent to the assistant |
| Stripe | United States | Payment processing | Billing and payment metadata only |
| Resend | United States | Email delivery | Transactional and workspace-sent email |
| Google / Microsoft | United States / EU | Sign-in (OAuth) | Identity assertion at login |
Messaging networks (e.g. Telegram), where a workspace uses one, transmit messages under their own terms and are not subprocessors of ExCom.ai. Questions: privacy@excom.ai.