Current subprocessors
| Provider | Purpose | Region | Transfer basis |
|---|---|---|---|
| Amazon Web Services (AWS) | Primary infrastructure — compute (ECS), database (RDS Postgres), object storage (S3), email delivery (SES), message queues (SQS), DNS (Route 53), secrets (Secrets Manager). | EU (Ireland or Stockholm) | — |
| Anthropic | LLM inference for the AI agent (Claude Sonnet + Haiku). Used for ticket analysis, drafts, auto-resolution, and every turn of the workspace chat. | United States | EU Standard Contractual Clauses + EU–US Data Privacy Framework |
| OpenAI | Embeddings for knowledge-base search and ticket-similarity clustering (text-embedding-3-small). No chat-completion calls — only embeddings. | United States | EU Standard Contractual Clauses + EU–US Data Privacy Framework |
| Stripe | Payment processing and subscription billing. Card data is handled directly by Stripe; Available never receives full card numbers. | EU + United States | EU Standard Contractual Clauses |
| Resend / SMTP mail provider (sign-in emails) | Delivery of magic-link sign-in emails and platform notifications. Does not handle your workspace's customer emails — those go through AWS SES under Available's control. | EU | — |
What we don't use
We deliberately don't run third-party analytics, advertising networks, or session-replay tools. There are no Google Analytics, no Facebook Pixel, no Segment, no Mixpanel, no Datadog Sessions on the customer side. The tracking we do run is first-party and limited to what's needed to operate the service (AI usage, error traces, audit log).
Change notifications
Under §6 of the DPA, Available will notify you by email at least 30 days before adding or replacing a subprocessor. You can object on reasonable grounds; if we can't accommodate the objection, you may terminate the affected subscription without penalty by providing written notice before the change takes effect.
Material changes — a new LLM provider, a new payment processor, a change of primary hosting region — always trigger notification. Internal swaps that don't change where or how data is processed (for example, swapping one SMTP provider for another with identical processing scope) may be made silently; we'll list the new provider here in any case.