Subprocessor List
Calliope Labs Inc, operating under the product name “Calliope AI” (“Calliope AI”), engages third-party service providers (“Subprocessors”) to assist in providing the Services. This page lists our current Subprocessors and describes their roles.
This list is maintained as part of our Data Processing Agreement and is updated when Subprocessors are added or removed.
1. Cloud Infrastructure Providers
These providers host our infrastructure and store Customer Data.
| Subprocessor | Purpose | Data Processed | Location |
|---|---|---|---|
| Amazon Web Services (AWS) | Primary cloud infrastructure, compute, storage, networking | All Customer Data | United States (us-west-2), EU (eu-west-1) available |
| Google Cloud Platform (GCP) | Secondary cloud infrastructure, specific services | Customer Data as configured | United States, EU available |
| Microsoft Azure | Specific AI services, backup infrastructure | Customer Data as configured | United States, EU available |
2. AI Model Providers
These providers process prompts and content when you use AI features in the Services. Data shared includes prompts, code, and conversation context.
| Subprocessor | Purpose | Data Processed | Location | Retention |
|---|---|---|---|---|
| OpenAI | GPT models for code generation and assistance | Prompts, code, conversation context | United States | 30 days (ZDR available) |
| Anthropic | Claude models for code generation and assistance | Prompts, code, conversation context | United States | 7 days (ZDR available) |
| Google (Gemini) | Gemini models for code generation and assistance | Prompts, code, conversation context | United States | 55 days (Enterprise ZDR) |
| Microsoft Azure OpenAI | Azure-hosted OpenAI models | Prompts, code, conversation context | United States, EU | 30 days (ZDR available) |
| AWS Bedrock | Various AI models via AWS | Prompts, code, conversation context | United States | Variable (ZDR available) |
| Cohere | Embedding and generation models | Prompts, code, embeddings | United States, Canada | 30 days (ZDR available) |
| TogetherAI | Open-source model hosting | Prompts, code, conversation context | United States | Minimal (ZDR available) |
| AI21 Labs | Jurassic models | Prompts, code, conversation context | United States, Israel | Perpetual license grant |
| Hugging Face | Model hosting and inference | Prompts, code, model artifacts | United States | 90 days post-cancel |
Note: “ZDR” = Zero Data Retention option available for enterprise customers.
3. Authentication & Identity
These providers handle user authentication and identity management.
| Subprocessor | Purpose | Data Processed | Location |
|---|---|---|---|
| Auth0 (Okta) | Authentication, single sign-on, identity management | Email, name, authentication credentials, session data | United States, EU available |
4. Payment Processing & Banking
These providers handle payment processing, billing, and banking operations.
| Subprocessor | Purpose | Data Processed | Location |
|---|---|---|---|
| Stripe | Payment processing, subscription management, credit card processing | Payment method details, billing address, transaction history | United States |
| Mercury | Business banking services | Transaction records, payment disbursements | United States |
Banking Disclosure: Mercury is a fintech company, not a bank. Banking services are provided by Choice Financial Group and Evolve Bank & Trust, Members FDIC. Funds held in Mercury accounts are FDIC insured up to $250,000 per depositor through Mercury’s partner banks.
PCI Compliance: Credit card processing is handled entirely by Stripe, which is PCI DSS Level 1 certified. Calliope AI does not store, process, or transmit credit card numbers directly.
Stripe Terms: Your use of payment services is subject to Stripe’s Terms of Service and Privacy Policy .
5. Communications & Support
These providers help us communicate with customers and provide support.
| Subprocessor | Purpose | Data Processed | Location |
|---|---|---|---|
| HubSpot | Marketing email, contact management, support notifications | Email addresses, name, interaction history | United States |
6. Analytics & Monitoring
These providers help us understand usage patterns and monitor service health.
| Subprocessor | Purpose | Data Processed | Location |
|---|---|---|---|
| Google Analytics / Google Tag Manager | Website analytics, tag management | Anonymized browsing data, IP addresses (anonymized) | United States |
| Microsoft Clarity | Session recording, heatmaps, UX analytics | Anonymized interaction data, page views | United States |
| LinkedIn Insight Tag | B2B analytics, conversion tracking | Anonymized visitor data | United States |
| Apollo.io | Website visitor identification, sales intelligence | IP address, company-level data | United States |
| Usercentrics | Consent management platform (CMP) | Consent records, cookie preferences | Germany (EU) |
| Cloudflare Analytics | Edge analytics, performance monitoring | Anonymized request metadata | Global (edge locations) |
7. Security & Infrastructure
These providers assist with security and content delivery.
| Subprocessor | Purpose | Data Processed | Location |
|---|---|---|---|
| Cloudflare | DDoS protection, CDN, WAF, DNS | IP addresses, request metadata | Global (edge locations) |
Update Notification Process
How We Notify You
When we add or replace a Subprocessor, we will:
- Update this page at least 30 days before the new Subprocessor begins processing
- Send email notification to the address associated with your account
- Note the change date and nature of the update below
Objection Process
If you have a legitimate objection to a new Subprocessor:
- Submit your objection in writing to legal@calliope.ai within 30 days of notification
- Include specific reasons for your objection related to data protection concerns
- Work with us to find a resolution in good faith
- If unresolved, you may terminate the affected Services without penalty
Recent Changes
| Date | Change | Subprocessor | Notes |
|---|---|---|---|
| 2026-05-23 | Updated | All | Removed: Postmark, SendGrid, Intercom, Mixpanel, Sentry, Datadog. Added: Microsoft Clarity, LinkedIn Insight Tag, Apollo.io, Usercentrics, Cloudflare Analytics. HubSpot replaces email providers. |
| 2025-01-19 | Initial publication | All | Initial subprocessor list published |
Data Processing Locations
United States (Default)
By default, Customer Data is processed in the United States (AWS us-west-2 region).
European Union
Enterprise customers may request EU data residency. When enabled:
- Primary infrastructure hosted in AWS eu-west-1 (Ireland)
- AI model calls routed through EU endpoints where available
- Some services may still require US processing (with appropriate safeguards)
Contact sales@calliope.ai to discuss EU data residency options.
Questions
If you have questions about our Subprocessors or data processing:
Email: privacy@calliope.ai
For Subprocessor objections: legal@calliope.ai
© 2026 Calliope Labs Inc. All rights reserved.
This Subprocessor List was last updated on May 23, 2026.
