Sub-processors
Last updated: 2026-07-22
Tacit, built and operated by Kiwana AI, Inc., uses the following sub-processors to operate the Service.
| Sub-processor | Service | Location | Data |
|---|---|---|---|
| Google (Firebase Authentication) | Identity & sign-in | US/Global | Email, password hash, OAuth identity, custom claims (tenant_id, role) |
| Neon Inc. *or* Google Cloud SQL (TBD by deployment) | Managed Postgres | US East / chosen region | All workspace data |
| Google Cloud (Cloud Run, GCS, Secret Manager, Cloud Logging, Cloud Monitoring) | Application hosting + object storage + secret/log/metric services | US Central (default) | Application traffic, logs, metrics, agent manifest files, master KEK |
| Anthropic (via Google Cloud Vertex AI, or direct API) | Large language model inference | US (Vertex region) | Prompts and tool inputs sent to the model; outputs returned. We can route to Anthropic direct API or Vertex AI per deployment. |
| Google (Google AI / Gemini API) | Text embeddings (primary) + Gemini inference | US/Global | Knowledge/corpus text and prompts sent to generate embeddings and, where configured, Gemini completions. |
| OpenAI, L.L.C. | Text embeddings (fallback) + model inference where configured | US/Global | Knowledge/corpus text and prompts sent for embeddings/inference when the OpenAI provider path is used. |
| Stripe, Inc. | Subscription billing | US / Global | Customer email, billing address, card token, subscription state. Statement descriptor: **Kiwana AI*tacitrun.com** |
| Resend, Inc. | Transactional email | US | Recipient email, subject, body of notifications |
| Functional Software, Inc. (Sentry) | Error monitoring | US | Server + client error traces, redacted to remove credentials |
| Better Stack (formerly Logtail) | Status page + uptime monitoring | EU / Global | Service health metrics, public status page content |
| AWS (Amazon Web Services) | Customer-side: Tier 1 manifest upload (S3) + Tier 2 Bedrock AgentCore deploy | Customer's AWS account / region | Manifest JSON + agent spec when the customer chooses AWS deploy |
Notice: Kiwana AI, Inc. will provide at least 30 days' notice via email and in-product banner before adding a new sub-processor.
Contact: privacy@kiwana.ai · www.kiwana.ai