Sub-processors.

Ezra uses sub-processors only where necessary to deliver the product. Each receives the minimum data needed for its function. None receive customer data beyond that scope. We do not sell, broker, or share customer data for marketing purposes.

The list below is the full set of sub-processors involved in operating Ezra as of the date above. We update this page when we add, remove, or replace a sub-processor.

Active sub-processors.

• Anthropic privacy →

  LLM inference (Claude) for conversation, application scoring, and draft generation.
  Data sharedDM message bodies, partner data fragments retrieved as context, action context. RetentionNo-training mode; zero retention beyond request lifetime. LocationUnited States.

• Intuit (QuickBooks Online) privacy →

  Payment processing and subscription management.
  Data sharedWorkspace email, billing name, tokenized card on file, subscription state. RetentionPer Intuit's standard financial-records retention. LocationUnited States.

• Composio privacy →

  Managed API integration layer for some affiliate platform connectors.
  Data sharedEncrypted API tokens, partner and conversion data flowing through the integration. RetentionPer Composio's data agreement; tokens revocable at any time. LocationUnited States.

• Neon privacy →

  Managed Postgres database for application data.
  Data sharedAll operational data (encrypted at rest at the storage layer with AES-256). RetentionMirrors Ezra's retention policy. LocationUS-East.

• Fly.io privacy →

  Application hosting for the Ezra agent runtime.
  Data sharedAll operational data while it is in process (in transit and in memory). RetentionNo persistent storage on Fly.io machines; ephemeral compute only. LocationUS-East (IAD / ORD regions).

• Langfuse (self-hosted) privacy →

  LLM call tracing for cost tracking and debugging.
  Data sharedLLM prompts and responses, with workspace ID as attribution metadata. Retention90 days rolling. LocationSelf-hosted on Fly.io, US-East.

• Cloudflare privacy →

  DNS, CDN, and DDoS protection for textezra.com.
  Data sharedRequest metadata only (IP, user agent, URL path). No request bodies. RetentionPer Cloudflare's standard log retention. LocationGlobal edge.

Documented for transparency.

These services exist in our platform configuration but are not active for the V1 Slack product. They are documented here so the full picture is available.

• LoopMessage privacy →

  iMessage relay for the future personal-channel pilot.
  Data sharedNone in V1. Will be reviewed and published before any production use.

• Twilio privacy →

  SMS fallback for the future SMS channel.
  Data sharedNone in V1.

Data Processing Addendum.

A signed Data Processing Addendum (DPA) is available on request. The DPA covers all active sub-processors above, including Standard Contractual Clauses for EU customers.

Notification of changes.

We update this page when we add, remove, or replace a sub-processor. The "Last updated" date at the top of this page reflects the most recent change.

If you would like to be notified by email when this list changes, send a one-line note to security@textezra.com with the subject "subprocessor watchlist." We will add you and notify before the change takes effect.