Boundless Intelligence Labs, Inc. uses the following subprocessors to provide the Service. We notify customers of material changes at least 30 days in advance.
Infrastructure
| Subprocessor |
Location |
Purpose |
| Amazon Web Services (AWS) |
United States |
Cloud hosting, networking |
| Cloudflare |
Global (US primary) |
CDN, DDoS protection, Turnstile |
Payments
| Subprocessor |
Location |
Purpose |
| Stripe, Inc. |
United States |
Payment processing, billing |
Authentication
| Subprocessor |
Location |
Purpose |
| Google LLC |
United States |
OAuth login |
| GitHub, Inc. |
United States |
OAuth login |
Model Providers (Inference)
Personal Data in API prompts may be processed by upstream providers when you use their models:
| Provider |
Location |
Models |
| OpenAI, LLC |
United States |
gpt-5.5, gpt-5.2, etc. |
| Anthropic PBC |
United States |
Claude 3.5 Sonnet, Haiku, etc. |
| Google LLC |
United States |
Gemini models |
| DeepSeek |
[Per provider policy] |
DeepSeek models (when proxied) |
| Boundless-hosted |
United States |
DeepSeek, Qwen, GLM (self-hosted) |
Per-model data practices: Model Provider Terms Index
Analytics (Optional)
| Subprocessor |
Location |
Purpose |
Opt-out |
| PostHog, Inc. |
United States |
Product analytics (if enabled) |
Cookie banner |
| Google Analytics |
United States |
Website analytics (if enabled) |
Cookie banner |
API requests do not use analytics subprocessors.
Email
| Subprocessor |
Location |
Purpose |
| [TBD — e.g., SendGrid/Resend] |
United States |
Transactional email |
Status Page
| Subprocessor |
Location |
Purpose |
| [TBD — e.g., Instatus/Better Stack] |
United States |
Public status page |
Change Notification
Subscribe to subprocessors updates: privacy@boundlessapi.com with subject "Subprocessor Updates"
Enterprise customers receive email notification per DPA.