Subprocessors · current list · updated 2026-05-23
The full list of vendors
we use to operate Ainfera.
Every company we share data with. Changes announced 30 days ahead.
| Subprocessor | Purpose | Data shared | Region |
|---|---|---|---|
| /// infrastructure | |||
| Railwayrailway.app | hosting · compute | Runs the api.ainfera.ai control + data planes. Receives prompts and responses in transit; nothing persisted on Railway disks — durable state lives in Supabase. | us-east |
| Cloudflarecloudflare.com | cdn · ddos · waf | Public-facing request metadata for ainfera.ai, api.ainfera.ai, audit.ainfera.ai, mcp.ainfera.ai. No payload inspection. | Global |
| Modalmodal.com | gpu compute · classifier | Runs the ModernBERT task-type classifier (S1) on CPU/GPU. Receives only the embedding/feature of the prompt, not the prompt text itself. | us-east |
| /// data & secrets | |||
| Supabasesupabase.com | managed postgres · auth | Primary database — stores tenant + agent records, the AuditChain table, ledger entries, receipts, model catalog, routing-policy rows. Holds prompt/response hashes (not the content) plus inference metadata. Supabase Auth handles dashboard OAuth (GitHub). | us-east |
| Dopplerdoppler.com | secrets management | Stores environment secrets (provider API keys, internal signing key) that the API reads at boot. No customer data. | Global |
| /// upstream model providers | |||
| Anthropicanthropic.com | model provider | Prompts & responses for calls routed to claude-* models. Their privacy policy governs use. | US |
| OpenAIopenai.com | model provider | Prompts & responses for calls routed to gpt-* & embeddings-* models. | US |
| Google AI Studioai.google.dev | model provider | Prompts & responses for calls routed to gemini-* models via the Google AI Studio (Generative Language) API. Their privacy policy governs use. | US · EU · APAC |
| Mistralmistral.ai | model provider | Prompts & responses for calls routed to mistral-* models. | EU |
| xAIx.ai | model provider | Prompts & responses for calls routed to grok-* models. | US |
| Togethertogether.ai | model provider · inference host | Prompts & responses for calls routed via Together's OpenAI-compatible API to open-weights models (Llama, Mistral, Qwen, DeepSeek families). Their privacy policy governs use. | US |
| Groqgroq.com | model provider · inference host | Prompts & responses for calls routed via Groq's OpenAI-compatible API to open-weights models served on LPU inference hardware. | US |
| DeepInfradeepinfra.com | model provider · inference host | Prompts & responses for calls routed via DeepInfra's OpenAI-compatible API to open-weights models. | US |
| Fireworksfireworks.ai | model provider · inference host | Prompts & responses for calls routed via Fireworks AI's OpenAI-compatible API to open-weights models. | US |
| Novita.ainovita.ai | model provider · inference host | Prompts & responses for calls routed via Novita.ai's OpenAI-compatible API to open-weights models. | APAC |
| /// payments & billing | |||
| Stripestripe.com | payments | Account billing info, invoice records, tax registration. No inference data. | US · EU |
| /// transactional comms | |||
| Resendresend.com | email · transactional | Account email and transactional notifications (cap alerts, key-rotation reminders, audit-event webhooks). No marketing. | us-east · eu-west |
| /// developer experience | |||
| GitHubgithub.com | auth · oauth | OAuth handshake to read public profile fields (handle, avatar). No repository access requested. | US |
| Discorddiscord.com | community | Public community Discord. Only what you choose to share there. | US |
| Vercelvercel.com | static hosting · edge | Marketing surface delivery (ainfera.ai) and edge routing logs. No inference payloads. | Global |
Be notified before we add or change a subprocessor.
30 days' notice, by email, every time. No marketing list — just this one feed.
Recent changes
2026-05-23
updated · disclosed full set of upstream model providers (10) to match live routing reality per /v1/providers. Added Together, Groq, DeepInfra, Fireworks, Novita.ai.
2026-05-22
published · initial subprocessor list for the public beta. Future additions or removals will appear here with 30 days' notice.
Canonical machine-readable list: /security/subprocessors.jsonQuestions: privacy@ainfera.ai