Subprocessors

How to read this list

A subprocessor is a third party that GONATURELLE engages and that may process personal data contained in Customer Data on our behalf. We list them here as required by the Data Processing Addendum and, for PHI, the Business Associate Agreement. Each one is bound by written data protection and confidentiality terms at least as protective as ours, and each one that may handle PHI has signed a business associate agreement with GONATURELLE.

We only list a provider for the role it actually performs. Certifications and attestations held by these providers are published by the providers themselves; we do not restate them here, and you should rely on the provider's own trust documentation.

We give at least 30 days' notice before adding a subprocessor. To receive notices, email privacy@gonaturelle.si with the subject line Subprocessor notifications, or subscribe from the Trust Center.

Cloud infrastructure

Customer Data in the multi-tenant cloud is hosted in the region the customer selects. We use one primary provider per region, with a second region in the same country for backups and disaster recovery. Customers on a dedicated single-tenant VPC choose their own provider (AWS, Google Cloud or Microsoft Azure) and region, and the infrastructure runs inside their account.

• Amazon Web Services, Inc.: hosting, storage, databases, key management and backups for the US multi-tenant region (us-east-1, N. Virginia, with backups in us-west-2, Oregon).
• Amazon Web Services India Private Limited: hosting, storage, databases, key management and backups for the India multi-tenant region (ap-south-1, Mumbai, with backups in ap-south-2, Chennai).
• Google LLC (Google Cloud) and Microsoft Corporation (Azure): used only when a customer selects them for a dedicated VPC deployment managed by GONATURELLE, in the region the customer specifies.

Model providers

The Services call large language models in two ways: to run the customer's agent if the customer configures GONATURELLE to call a hosted model on its behalf, and to run judge models in a calibrated ensemble. Each provider below is used under zero data retention terms or equivalent no-storage configurations where the provider offers them, and under contractual commitments that inputs and outputs are not used to train the provider's models. Customers can restrict which providers a suite may call, or route all model calls to endpoints in their own cloud account, in which case these providers do not act as GONATURELLE subprocessors for that customer.

• OpenAI, L.L.C.: judge and agent model inference through the OpenAI API (United States).
• Anthropic, PBC: judge and agent model inference through the Anthropic API (United States).
• Amazon Web Services (Amazon Bedrock): judge and agent model inference in the same region as the customer's data (United States or India).
• Google LLC (Vertex AI): judge model inference for cross-family judging (United States).

Communications, support and billing

These providers handle account and contact data rather than test case content. Support tickets may contain Customer Data if a user pastes it into a ticket; we ask users not to include PHI in support requests and redact it when we find it.

• Amazon Web Services (Amazon SES): transactional email such as invitations, password-less sign-in links, gate notifications and invoices (United States).
• Zendesk, Inc.: customer support ticketing and help centre (United States).
• Slack Technologies, LLC: shared support channels for Scale and Enterprise customers who request them (United States).
• Stripe, Inc.: payment processing and subscription billing; receives billing contact data and card details directly from the customer (United States).
• Google LLC (Google Workspace): internal email and documents for GONATURELLE staff, which may contain account and contract information (United States).

Affiliates and deployment notes

GONATURELLE personnel in India and the United States provide engineering, support and operations. Support staff access Customer Data only when a customer grants time-boxed access from the application for a specific ticket, and every access is logged in the customer's audit trail.

For self-hosted air-gapped Kubernetes deployments, GONATURELLE has no access to Customer Data at all, none of the infrastructure or model providers above process it, and updates are delivered as signed container images that the customer imports. Usage reporting for billing is a signed count of eval runs that the customer exports and sends to us.

If a subprocessor changes its legal entity name, region or role, we update this page and treat a material change in role or region as a new subprocessor for notice purposes.