Subprocessor Register
Organization customers authorize the subprocessors in this register under the Enspeller Data Processing Addendum. We will give at least 14 days’ advance notice before a new subprocessor begins processing Customer Personal Data, except for an emergency needed to protect the service or users.
1. How to read this register
“Core” means the provider supports a normal production account. “Feature-conditional” means the provider receives data only when the relevant feature is enabled and used. A provider receives only the categories needed for its purpose; an identity or billing provider does not receive manuscript content merely because it appears here.
2. Approved subprocessors
| Provider and location | Service | Data involved | Status and safeguards |
|---|---|---|---|
|
netcup GmbH Contracting entity: Germany Hosting region: United States |
Production compute, networking, and server storage. | Encrypted or access-controlled service data stored or processed by Enspeller, including accounts, projects, and operational metadata. |
Core U.S. hosting region; infrastructure access is restricted and logged. Restricted transfers use the safeguards described in the DPA. |
|
WorkOS, Inc. United States and vendor-listed locations |
Authentication, organization directory, SSO, SCIM, and identity audit functions. | Name, email, account and organization identifiers, role/membership data, authentication and security events. No manuscript content. |
Core Contractual data-protection terms and transfer safeguards. |
|
Amazon Web Services, Inc. and applicable affiliates Configured AWS regions |
AWS Key Management Service for encryption key operations and Amazon SES for transactional email. | Encryption key identifiers/context and encrypted data keys; email address, delivery metadata, and the service email requested or required. KMS is not sent plaintext manuscripts. |
Core Scoped service identities, regional configuration, and contractual transfer safeguards. |
|
OpenRouter, Inc. United States; upstream location varies |
Routing of requested large-language-model analysis to an eligible model provider. | The minimum relevant manuscript excerpt, instruction, requested analysis and response, plus bounded request metadata. |
Feature-conditional Production requests require zero data retention, data collection denied, and no training. Only reviewed upstreams meeting those controls may be used. |
|
OpenAI OpCo, LLC or OpenAI Ireland Ltd., as
applicable United States and vendor-listed locations |
Embeddings and other expressly enabled API analysis. | The minimum relevant text excerpt and API request metadata; returned vectors or analysis. |
Feature-conditional The production project must have Zero Data Retention approved and no-training terms in force. |
|
Google LLC and its applicable contracting affiliate United States and vendor-listed locations |
Paid or enterprise Gemini embeddings and expressly enabled analysis. | The minimum relevant text excerpt and API request metadata; returned vectors or analysis. |
Feature-conditional The no-cost developer tier is prohibited for manuscripts. Production requires contractually confirmed zero retention and no training. |
|
Eleven Labs Inc. United States and vendor-listed locations |
Speech-to-text and text-to-speech when voice features are enabled. | Audio submitted for transcription, text submitted for speech, generated audio, and bounded request metadata. |
Feature-conditional Voice uses the verified Enterprise Zero Retention Mode workspace when enabled; production calls disable provider logging. |
3. Payment provider and independent recipients
Stripe, Inc. and its applicable affiliates provide checkout, subscription billing, invoicing, fraud prevention, and tax-related payment functions. Stripe acts as our processor for some limited account and transaction handling and may act independently where financial, fraud, or legal obligations require. Stripe receives billing contact information, transaction details, subscription status, and payment credentials entered directly into Stripe’s interface. Enspeller does not send manuscripts to Stripe.
Legal authorities, professional advisers, and parties to a corporate transaction are recipients only when the circumstances described in the Privacy Policy arise; they are not standing subprocessors used to operate the service.
4. AI routing chain
OpenRouter routes a request to an upstream model host and is therefore not necessarily the last processor in the chain. Enspeller will approve an upstream only after checking its identity, processing location, retention/training controls, security terms, and contractual flow-down. A newly eligible upstream that can receive Customer Personal Data must be disclosed through this register and the change-notice process before use.
5. Changes, notice, and objections
- We update this page and its effective date before the provider begins processing Customer Personal Data.
- We send notice to the organization owner and any legal/privacy contact recorded for the account at least 14 days in advance.
- An organization may object during that period by emailing compliance@eriastudios.com and explaining reasonable data-protection grounds related to the change.
- We will work in good faith on a commercially reasonable alternative. If none is available, either party may stop the affected feature or terminate the affected service under the DPA without a penalty for unused prepaid service that cannot lawfully be provided.
An emergency addition needed to remediate a security incident may take effect sooner. We will provide notice as soon as reasonably practicable and preserve the same objection and remediation process.
6. Questions
Eria Studios, Inc.
1111B S Governors Ave STE 34533
Dover,
DE 19904
United States
compliance@eriastudios.com