Subprocessor List

Current core providers

• Google Cloud and Firebase: hosting, database, storage, authentication, functions, and infrastructure.
• Google Gemini / Genkit: AI generation and classification for approved non-PHI workloads.
• Google Workspace: authorized Gmail, Calendar, and Drive integrations.
• Stripe: checkout, recurring billing, customer portal, and payment records.
• Resend: transactional and newsletter email delivery.
• Google Analytics and AdSense: optional analytics and advertising after consent.
• Slack and Linear: internal collaboration, delivery, and operations where configured.
• GitHub: public repository content and software development.
• LinkedIn and X: configured social publishing.

Conditional providers

Approved research, contact-enrichment, model, voice, and delivery providers may be enabled for a specific workflow or engagement. The applicable SOW or DPA identifies providers that process client personal data. A provider contracted and controlled directly by a client for its no-PHI build-and-handoff production environment is not an Ai and Sons subprocessor merely because we deliver code for the client to deploy there. PHI may not be sent to an Ai and Sons provider unless it is covered by an executed BAA and the specific service is approved.

Changes and objections

Client DPA subprocessors receive the notice and objection treatment stated in the DPA. Public visitors may review updates here and contact team@aiandsons.com with questions.