Trust · Subprocessors
Every hand your data passes through.
Preuve AI is a French business: your contract sits in the EEA, and product analytics run on our own EU server. Every US transfer below is covered by the EU-U.S. Data Privacy Framework (DPF) or Standard Contractual Clauses (SCCs), and each subprocessor is bound by a data processing agreement.
Last updated: August 20, 2026
Infrastructure3
Where the product runs and your data is stored. Encrypted in transit (TLS 1.3) and at rest (AES-256).
| Subprocessor | Purpose & data received | Location | Safeguard |
|---|---|---|---|
 Cloudflare | Hosting, database (D1), file storage (R2), authentication infrastructure: account data, ideas, reports | US · global | DPF + SCCs |
 Vercel | Web hosting and CDN: IPs and request metadata in transit | US | DPF + SCCs |
 Trigger.dev | Report-generation pipeline orchestration: report job payloads | US | SCCs |
AI analysis6
The models that read your idea to produce your report. All under enterprise API terms that prohibit training on your data. No human at these providers sees your submission.
| Subprocessor | Purpose & data received | Location | Safeguard |
|---|---|---|---|
 Google (Gemini) | AI analysis: idea text | US / EU | DPF + SCCs |
 Anthropic (Claude) | AI analysis: idea text | US | DPF + SCCs |
 OpenAI (GPT) | AI analysis: idea text | US | DPF + SCCs |
 xAI (Grok) | AI analysis: idea text | US | SCCs |
 AWS Bedrock | Managed model platform: AI request payloads in transit | US / EU | DPF + SCCs |
 OpenRouter | Model gateway: AI request payloads in transit | US | SCCs |
Billing, email & support4
| Subprocessor | Purpose & data received | Location | Safeguard |
|---|---|---|---|
 Stripe | Payments: email, billing name; card details stay on Stripe and never reach our servers | US / IE | DPF + SCCs |
| Amazon SES (AWS) | Transactional email delivery: recipient name, address, email content | US | DPF + SCCs |
 Resend | Scheduled email delivery and email failover: recipient name, address, email content | US | SCCs |
 Intercom | Support chat inside the app: name, email, plan, and the contents of support conversations | US | DPF + SCCs |
Analytics3
Product analytics only. Events are keyed to opaque IDs: your idea text is never sent to analytics.
| Subprocessor | Purpose & data received | Location | Safeguard |
|---|---|---|---|
 PostHog | Product analytics: IP, request metadata, opaque event IDs | US / EU | DPF + SCCs |
 Microsoft Clarity | Heatmaps on public landing pages only, never inside the app | US | DPF + SCCs |
 OpenPanel (self-hosted) | Product analytics on our own OpenPanel instance on Hetzner (Germany): IP, request metadata, opaque event IDs; no third-party analytics vendor receives this data | EU (DE) | First-party |
See also our security overview, privacy policy, and for Consultants customers, the Consultants privacy policy (a signed DPA is available on request at support@preuve.ai).