Last updated 28 June 2026
This Sub-processors list is a version 1 document and is pending final legal review. We keep it current and update it when our sub-processors change.
To deliver and operate our platform, Kapalins Pty Ltd engages a small number of trusted third-party providers ("sub-processors") that may process data on our behalf. We engage each under appropriate confidentiality and data-protection obligations and disclose only what is needed for the relevant service. The table below lists our current sub-processors, what each is used for, and where it processes data.
| Sub-processor | Purpose | Where it processes |
|---|---|---|
| Google Cloud Platform | Hosting, compute and database | Australia (Sydney) |
| Google Firebase / Identity Platform | Authentication | Global / US |
| Cloudflare | DNS, CDN and edge security (WAF) | Global |
| SendGrid (Twilio) | Transactional email | US |
| Sentry | Error monitoring | US |
| Groq | Powers the AI Hub on this website only | US |
Our platform lets a customer connect the specific AI model or models they choose to govern. When a customer connects a model, the corresponding model provider is engaged only for that specific model and only for the data the customer routes through it. The model providers that may be engaged in this way are:
Whether any of these providers processes data — and which one — depends entirely on the customer's own configuration of which models they connect and route traffic to. Kapālins does not itself use customer data to train AI models.
We may add or replace sub-processors as our platform evolves. The current list is always published on this page, with the "last updated" date shown above. Customers with a contractual right to advance notice of sub-processor changes will be notified in accordance with their agreement.
For questions about our sub-processors or data handling, contact [email protected]. See also our Privacy Policy and Security Policy.
Kapalins Pty Ltd — Australia.
A 30-minute walkthrough of the Trust Index, the three observation modes and your regulator’s evidence chain — on your estate.