Sub-processors
The third parties that may process data on our behalf for managed deployments, and what each is used for.
The canonical list.
These are the third parties that may process data on our behalf for managed deployments, and what each is used for. We keep the list short and current, and notify customers of material changes in line with the Data Processing Addendum.
| Entity | Purpose | Data | Location |
|---|---|---|---|
| Amazon Web Services | Hosting, storage and secrets (KMS) for managed deployments | Tenant console data and the masked findings the sensors report (encrypted at rest); no file contents, secret values or stored prompt/response bodies | Hosted in the United States. United States only: AWS us-east-1 (N. Virginia). Managed tenants are not offered in an EU region today. Customer-cloud (in-VPC) deployments run in the region you choose |
| Google Workspace (SMTP relay) | Transactional email (enquiries, alerts) | Recipient addresses and the content of enquiry and alert emails | United States |
| Reasoning backend (configurable): OpenAI (default) | AI triage and explanation of findings: a managed hosted model (OpenAI, United States by default), or Amazon Bedrock inside your account (in-VPC), or fully local inference; deterministic-only sends nothing to a reasoning model | Risk title, host name, file paths, scrubbed command lines, package names, AI destinations and a masked key prefix. No file contents, secret values or prompts. Not used for model training; the provider may retain inputs up to about 30 days for abuse monitoring | United States by default; inside your account for in-VPC; none for local or deterministic-only. Provider region: United States |
In-VPC / self-hosted deployments have zero external sub-processors for data processing: the console and the classification model run entirely inside your own AWS account, with no data egress.
Change notifications
We notify customers of any new sub-processor before it begins processing customer data, in line with the DPA. To join the notification list, email info@araghatta.com. A signed sub-processor list is available as part of the DPA.
Last updated: 4 October 2026 · This is the canonical sub-processor list; it is also summarized in the Trust Center.
See the AI on your fleet in about a week.
Run the sensor across your estate and receive an AI risk report and an AI Bill of Materials. The assessment is free and carries no commitment.