Sub-processors
Citations.io is a trading style of NE26 Limited, a company registered in England and Wales (company number 16030871) with its registered office at First Floor Office, 3 Hornton Place, London, W8 4LZ, United Kingdom.
1.Overview
Citations.io engages the sub-processors listed below to provide the Service. Each sub-processor is bound by contractual data-protection obligations no less protective than those in our Data Processing Addendum. Where personal data is transferred outside the UK or EEA, we rely on the Standard Contractual Clauses (SCCs) and, where applicable, the UK International Data Transfer Addendum, supplemented by encryption in transit and at rest.
2.Hosting and infrastructure
| Sub-processor | Purpose | Location | Transfer mechanism |
|---|---|---|---|
| Cloudflare, Inc. | Edge compute, CDN, DDoS protection | USA / global | SCCs + UK Addendum |
| Supabase, Inc. | Managed Postgres database, authentication, storage | EU (eu-west-1) | EEA / UK - no transfer |
3.AI inference providers
| Sub-processor | Purpose | Location | Transfer mechanism |
|---|---|---|---|
| OpenAI, L.L.C. | LLM inference for AI features | USA | SCCs + UK Addendum (Zero Data Retention API where supported) |
| Anthropic, PBC | LLM inference for AI features | USA | SCCs + UK Addendum |
| Google LLC | LLM inference (Gemini) for AI features | USA / EU | SCCs + UK Addendum |
| Perplexity AI, Inc. | Query and citation analysis | USA | SCCs + UK Addendum |
4.Operational sub-processors
| Sub-processor | Purpose | Location | Transfer mechanism |
|---|---|---|---|
| Stripe Payments Europe, Ltd. | Subscription billing and payments | Ireland / USA | SCCs + UK Addendum |
| Mailgun Technologies, Inc. | Transactional email delivery | USA / EU | SCCs + UK Addendum |
| Slack Technologies, LLC | Customer notifications via Slack integration | USA | SCCs + UK Addendum |
5.Notice of changes
We will provide at least 30 days' advance notice of any new sub-processor or replacement via this page. To receive email notifications of changes, write to privacy@citations.io with the subject line "Subscribe: Sub-processor updates". Customers may object on reasonable data-protection grounds within the notice period as set out in the DPA.
Write to privacy@citations.io and we will respond within 30 days, or sooner where required by law.