Sub-processors.

The third-party providers that process Customer Data on AgentPrizm's behalf. Updated when sub-processors are added or removed.

Last updated: June 3, 2026

VUGA Enterprises LLC dba AgentPrizm ("AgentPrizm") uses the sub-processors listed below to deliver the Service. All sub-processors are contractually bound to process Customer Data only as directed by AgentPrizm, under obligations no less protective than those in our Data Processing Addendum (DPA).

We will provide at least 30 days' advance noticebefore adding a new core sub-processor or making material changes to an existing one. Notices are sent to the account email address and reflected here with a new "last updated" date. For the objection procedure, see Section 6 of the DPA.

International transfers: All listed sub-processors are located in the United States. EU/EEA, UK, and Swiss Personal Data transferred to these sub-processors is covered by the Standard Contractual Clauses incorporated in the DPA.

01Core sub-processors

These sub-processors are engaged for all customers and cannot be individually opted out of without terminating the Service.

Core sub-processors
Sub-processorPurposeData categoriesLocation
HostingerVPS hosting — the primary compute and storage environment for the ServiceAll Customer Data at rest and in use (application server, database, backups)United States
CloudflareCDN, DNS, edge proxy, and DDoS mitigationNetwork traffic metadata (IPs, request paths, headers); Customer Data passes through edge in transitUnited States (global edge PoPs)
OpenAIEmbedding generation (converts memory text into vector representations for semantic search) and RAG inference for the /ask endpointCustomer memory text and ingested document content — sent under AgentPrizm's API account. OpenAI's API data processing terms apply (zero-data-retention mode not currently enabled; data is not used for training per OpenAI's API terms).United States
StripePayment processing, subscription billing, and customer portalBilling information (name, email, payment method); Customer Data does not pass through StripeUnited States
ResendTransactional email delivery (password resets, account notifications, billing receipts)Account email address, email content for transactional messagesUnited States

02Optional connector sub-processors

These sub-processors are engaged only if you explicitly connect the corresponding integration in your dashboard. Disconnecting the integration stops the data flow immediately. No content from your connected accounts is processed until you enable the connector.

Optional connector sub-processors
Sub-processorPurposeData categoriesLocation
Google / Google DriveOptional content-source connector — syncs Google Drive documents into Customer memory recordsGoogle Drive document content and metadata, only for customers who explicitly connect this integrationUnited States
NotionOptional content-source connector — syncs Notion pages and databases into Customer memory recordsNotion page content and metadata, only for customers who explicitly connect this integrationUnited States
DropboxOptional content-source connector — syncs Dropbox files into Customer memory recordsDropbox file content and metadata, only for customers who explicitly connect this integrationUnited States

03Change notifications & objection

To receive advance notice of sub-processor changes by email, ensure your account email is current in your account settings. You may also check this page at any time — the "last updated" date at the top of the page changes whenever the list changes.

To object to a new or changed sub-processor on reasonable data-protection grounds, contact us at [email protected] within the 30-day notice period. See the DPA for the full objection procedure and your rights if an objection cannot be resolved.

04Contact

Questions about this list or our sub-processor program: [email protected].

VUGA Enterprises LLC dba AgentPrizm, 18117 Biscayne Blvd Unit 1039, Aventura, FL 33160, United States.

Talk to us