Sub-processors
Effective Date: April 20, 2026 Last Updated: April 20, 2026
Red Sovereign LLC, doing business as Aumata (“Aumata,” “we,” “us,” or “our”), engages the third-party service providers listed below to help us operate our Site, deliver our Services, and process personal information on behalf of our customers. This page is the authoritative list of Aumata’s sub-processors.
We commit to giving customers at least 30 days’ written notice before adding a new sub-processor that handles customer personal data, so that customers who have executed a Data Processing Addendum with us may reasonably object. To subscribe to change notifications, email [email protected].
1. Infrastructure and hosting
| Sub-processor | Purpose | Location | Transfer mechanism |
|---|---|---|---|
| Cloudflare, Inc. | Website hosting, DNS, WAF, bot mitigation, Turnstile anti-abuse, CDN | United States | EU-US Data Privacy Framework; SCCs (backup) |
| GitHub, Inc. (Microsoft) | Source control, content publishing, Pages preview | United States | EU-US Data Privacy Framework; SCCs (backup) |
| Supabase, Inc. | Agent state database (SEO/LinkedIn agents); client configuration | United States | SCCs |
2. AI and language models
| Sub-processor | Purpose | Location | Transfer mechanism |
|---|---|---|---|
| Anthropic, PBC | Large language model inference (Claude) for agent-generated content; rate limited; zero-retention for API data beyond 30 days per Anthropic’s policy | United States | SCCs |
3. Analytics and visitor insight
| Sub-processor | Purpose | Location | Transfer mechanism |
|---|---|---|---|
| Google LLC (Google Analytics 4) | Aggregated site analytics | United States | EU-US Data Privacy Framework |
| Microsoft Corporation (Clarity) | Session heatmaps and interaction playback; PII-masking enabled | United States | EU-US Data Privacy Framework |
| Ahrefs Pte. Ltd. (Ahrefs Analytics) | First-party privacy-preserving site analytics; no cross-site tracking | Singapore | SCCs (UK IDTA where applicable) |
| RB2B, Inc. | US-only reverse-IP visitor identification for B2B prospect signal | United States | N/A (US visitors only; RB2B declines EU/UK traffic at its edge) |
4. Transactional communications
| Sub-processor | Purpose | Location | Transfer mechanism |
|---|---|---|---|
| Resend, Inc. | Transactional email delivery (contact form notifications, service emails) | United States | SCCs |
| Slack Technologies, LLC | Internal notifications (SEO/LinkedIn agent alerts); no customer PII sent | United States | EU-US Data Privacy Framework |
5. Customer engagement
| Sub-processor | Purpose | Location | Transfer mechanism |
|---|---|---|---|
| Voiceflow, Inc. | On-site chat widget | Canada | Canadian adequacy decision (EU); SCCs (UK) |
| Attio Ltd. | Customer relationship management for inbound leads and customer records | United Kingdom | UK adequacy decision (EU); UK IDTA |
| Metricool Analitics, S.L. | LinkedIn post scheduling for Aumata and client LinkedIn accounts | Spain (EEA) | N/A (intra-EEA) |
6. SEO and research
| Sub-processor | Purpose | Location | Transfer mechanism |
|---|---|---|---|
| DataForSEO LLC | Primary SEO data: keyword rankings, SERP analysis, competitor intelligence | United States | SCCs |
| Firecrawl, Inc. | Web search and page scraping for agent research | United States | SCCs |
7. Changes and notifications
We may update this list to reflect changes in our service providers. Material additions that affect the processing of customer personal data will be posted here at least 30 days before taking effect, and customers subscribed to change notifications will be emailed. Removal of a sub-processor is effective immediately and does not require notice.
8. Contact
Questions about our sub-processors, or to subscribe to change notifications:
Red Sovereign LLC d/b/a Aumata Email: [email protected]