> ## Documentation Index > Fetch the complete documentation index at: https://help.heydenada.com/llms.txt > Use this file to discover all available pages before exploring further. # Sub-processors > Third-party service providers used to deliver the Denada platform, and data residency **Last updated:** July 11, 2026 Denada Inc. uses the third-party service providers listed below to deliver the Denada platform. Each sub-processor is bound by a written data-processing agreement and may use Customer Personal Data only as instructed by Denada. To receive email notifications of changes to this list, email [privacy@heydenada.com](mailto:privacy@heydenada.com). ## Notification of changes We notify customers of new sub-processors or replacements at least **30 days** before they take effect, via this page and by email to designated account administrators. Customers may object on reasonable data-protection grounds during the notice period as set out in Section 5 of our [Data Processing Agreement](/legal/data-processing-agreement). ## Sub-processors ### Infrastructure and hosting | Sub-processor | Purpose | Location of processing | Entity | | --------------------- | -------------------------------------------------------------------------------------------------------- | -------------------------------------------------------------- | --------------------- | | Google Cloud Platform | Application hosting, Firestore database, Cloud Storage, Cloud Functions, Cloud Tasks, BigQuery analytics | United States (us-central1) | Google LLC, USA | | Cloudflare | Content delivery, edge workers (image transformation, template rendering), DDoS protection, DNS | Global edge network with primary controls in the United States | Cloudflare, Inc., USA | ### AI / LLM inference | Sub-processor | Purpose | Location of processing | Entity | | ---------------- | ------------------------------------------------------------------ | ---------------------- | ----------------------- | | Anthropic | LLM inference for assistant generation | United States | Anthropic, PBC, USA | | OpenAI | LLM inference for assistant generation | United States | OpenAI, L.L.C., USA | | Google Vertex AI | LLM inference for assistant generation | United States | Google LLC, USA | | Fireworks AI | LLM inference for assistant generation (hosted open-weight models) | United States | Fireworks AI, Inc., USA | | Groq | LLM inference for assistant generation (hosted open-weight models) | United States | Groq, Inc., USA | All LLM providers above operate under contractual terms that exclude Customer Content from foundation-model training and limit retention to short-term abuse monitoring (typically up to 30 days). ### Application services | Sub-processor | Purpose | Location of processing | Entity | | ---------------- | ------------------------------------------------------------------------------ | ---------------------- | ----------------------------------------- | | Algolia | Search indexing for in-app search | United States | Algolia, Inc., USA | | Postmark | Transactional email (account, security, billing notices) | United States | ActiveCampaign, LLC, USA | | Campaign Monitor | Marketing email (where you have opted in) | United States | Campaign Monitor Pty Ltd, Australia / USA | | Twilio | SMS and voice message delivery (notifications where a phone number is on file) | United States | Twilio Inc., USA | | Firecrawl | Web content extraction when you provide URLs to the assistant | United States | Firecrawl, USA | | Exa | Web search performed on your behalf by the assistant | United States | Exa Labs, Inc., USA | ### Operations (limited or no Customer Personal Data) The following services support Denada's internal operations and do not process Customer Personal Data in the ordinary course. They are listed for transparency. | Service | Purpose | | ---------------- | ---------------------------------------------------------------------------------------- | | Slack | Operational notifications and internal communication (does not contain Customer Content) | | 1Password | Password management for Denada personnel | | Airtable | Internal project tracking | | GitHub | Source-code management | | Google Workspace | Internal email, documents, calendar | | Oneleet | Compliance and vendor-management platform | ## Data residency **Production data location.** Denada stores customer data in **Google Cloud Platform's us-central1 region** (Council Bluffs, Iowa, United States). Cached and static assets are distributed via Cloudflare's global edge network. **LLM inference.** Inference requests are routed to provider endpoints in the United States as listed in the table above. Inference inputs and outputs are not durably stored at the provider beyond the short-term abuse-monitoring window described in the Privacy Policy. **Backups.** Encrypted backups are retained in the same region as production data and are deleted in accordance with the retention timelines in the Privacy Policy. **International transfer mechanism.** For transfers of personal data from the European Economic Area, the United Kingdom, or Switzerland to the United States, Denada relies on the European Commission's Standard Contractual Clauses (Module 2), as incorporated in the [Data Processing Agreement](/legal/data-processing-agreement) at Annex 3. **EU data hosting.** Denada does not currently offer EU-only data residency. Customers with a regulatory requirement for EU residency should contact [privacy@heydenada.com](mailto:privacy@heydenada.com). ## Change history | Date | Change | | ------------- | -------------------------------- | | July 11, 2026 | Added Twilio, Firecrawl, and Exa | | June 20, 2024 | Initial publication | ## Contact For questions about this page or to request a counter-signed Data Processing Agreement, email [privacy@heydenada.com](mailto:privacy@heydenada.com).