Sub-processors

Fill in before publishing. This list must match the providers actually configured in production. Changes are announced here at least 30 days before they take effect (see section 5 of the DPA). To get notified, e-mail privacy@aacsearch.com with the subject "Sub-processor updates".

Sub-processor	Service	Data	Location	Safeguard
Hosting provider (to confirm)	servers, database, search engine, backups	all customer data	[не задано: dataLocation]	DPA; SCCs if outside the EEA
E-mail delivery (Resend / Postmark / Mailgun — the one configured)	transactional e-mail	name, e-mail	(to confirm)	DPA, SCCs / DPF
LLM provider (OpenAI or the one configured) — only if the AI assistant is enabled	generating answers from retrieved passages	question text and retrieved passages	USA	DPA, SCCs / DPF; no training on customer data
ООО «Робокасса»	card payments (Russia)	payer e-mail, payment amount	Russia	contract; 152-ФЗ
АО «Точка»	card payments and acquiring (Russia)	payer e-mail, payment amount	Russia	contract; 152-ФЗ
Stripe (only if enabled)	card payments (international)	billing contact, payment data	USA / EU	DPA, DPF / SCCs
Error monitoring (if enabled)	crash reports	technical identifiers	(to confirm)	DPA

Payment providers act as independent controllers for card data; AACSearch never receives full card numbers.