1.Current subprocessors
| Provider | Purpose | Category | Region | Status |
|---|---|---|---|---|
| Supabase | Application database, authentication and document storage | Database & backend | See project configuration (EU/US region as provisioned) | In use |
| Cloudflare | Application hosting, edge delivery and server-side rendering | Hosting | Global edge network | In use |
| Alibaba Cloud (Model Studio) | Objective reasoning and planning model inference | AI infrastructure | International (Singapore) endpoint | In use |
| Paddle | Merchant of Record: checkout, payment processing, invoicing, tax | Payments | UK / EU / US | In use |
| Supabase Auth email delivery | Transactional email such as sign-in links and confirmations | See project configuration | In use | |
| ElevenLabs | Speech synthesis for spoken briefings | Voice | EU / US | Optional — only when enabled |
2.How we contract with them
Each subprocessor is engaged under terms that require it to process data only on our instructions, keep it confidential, apply appropriate security measures and support data subject requests. Where a provider processes data outside the UK or EEA, we rely on appropriate transfer safeguards as described in the Privacy Policy.
3.AI infrastructure
BLEUN uses a provider abstraction for AI, so the reasoning provider behind a feature can change as models improve. Any provider actually in use appears in the table above, and we update this page when the list changes.
4.Changes and notification
This page is the canonical list. Professional and Enterprise customers with a signed DPA can request notification of new subprocessors by writing to privacy@bleun.ai.
Questions about this document? Write to legal@bleun.ai or visit the Legal & Trust centre.