Legal

Subprocessors

The third-party vendors we use to run the Service, and what each of them processes.

Last updated July 15, 2026 · Operate, Inc.

This document is a template that reflects how the product works today. It is not legal advice. Have qualified counsel review and adapt it before relying on it in production.

We use a small set of trusted subprocessors to operate the Service. Each is bound by contractual data-protection obligations. We will update this page before adding a new subprocessor that processes customer personal data.

Infrastructure and application hosting

Application hosting and serverless compute for the marketing site, dashboard, and hosted MCP endpoint. Processes account, content, and usage data in transit and at rest.

Realtime backend and database

Our reactive database and function runtime host tasks, documents, agents, events, and payment records. This is where the bulk of customer content lives, encrypted at rest.

Authentication and identity

Our identity provider handles sign-in, session management, and user profile data, and issues the tokens the Service verifies.

Email delivery

Transactional email (mentions, assignments, approvals) is delivered through our email provider, which processes recipient addresses and message content.

AI processing

When you enable AI features, our AI provider generates embeddings and completions from the relevant content. It is contractually prohibited from training foundation models on Your Content.

Payment facilitation (x402)

When agents pay through x402, a payment facilitator verifies and settles the on-chain payment. It processes wallet addresses, amounts, and settlement references. Settlement is recorded on a public blockchain.