Sub-processors
Citations.io is a trading style of CITATIONS IO LTD, a company registered in England and Wales (company number 17311704) with its registered office at 38, Collingwood Buildings Collingwood Street, Newcastle Upon Tyne, United Kingdom, NE1 1JF. Registered with the UK Information Commissioner's Office (ICO registration ZC187049).
1.Overview
Citations.io engages the sub-processors listed below to provide the Service. Each sub-processor is bound by contractual data-protection obligations no less protective than those in our Data Processing Addendum. Where personal data is transferred outside the UK or EEA, we rely on the Standard Contractual Clauses (SCCs) and, where applicable, the UK International Data Transfer Addendum, supplemented by encryption in transit and at rest.
2.Hosting and infrastructure
| Sub-processor | Purpose | Location | Transfer mechanism |
|---|---|---|---|
| Cloudflare, Inc. | Edge compute, CDN, DDoS protection | USA / global | SCCs + UK Addendum |
| Supabase, Inc. | Managed Postgres database, authentication, storage | EU (eu-west-1) | EEA / UK - no transfer |
3.AI inference providers
| Sub-processor | Purpose | Location | Transfer mechanism |
|---|---|---|---|
| OpenAI, L.L.C. | LLM inference for AI features | USA | SCCs + UK Addendum (Zero Data Retention API where supported) |
| Anthropic, PBC | LLM inference for AI features | USA | SCCs + UK Addendum |
| Google LLC | LLM inference (Gemini) for AI features | USA / EU | SCCs + UK Addendum |
| Perplexity AI, Inc. | Query and citation analysis | USA | SCCs + UK Addendum |
4.Operational sub-processors
| Sub-processor | Purpose | Location | Transfer mechanism |
|---|---|---|---|
| Stripe Payments Europe, Ltd. | Subscription billing and payments | Ireland / USA | SCCs + UK Addendum |
| Mailgun Technologies, Inc. | Transactional email delivery | USA / EU | SCCs + UK Addendum |
| Slack Technologies, LLC | Customer notifications via Slack integration | USA | SCCs + UK Addendum |
5.Notice of changes
We will provide at least 30 days' advance notice of any new sub-processor or replacement via this page. To receive email notifications of changes, write to privacy@citations.io with the subject line "Subscribe: Sub-processor updates". Customers may object on reasonable data-protection grounds within the notice period as set out in the DPA.
Write to privacy@citations.io and we will respond within 30 days, or sooner where required by law.