← Back to home

Sub-processors

Last updated: August 6, 2026

MeteorIT d.o.o. Beograd uses the service providers below to operate the Integral platform. This page is the complete list referred to in section 8 of our Privacy Policy.

Each entry states what the provider does for us, the entity and country where processing takes place, and the safeguard relied on when data leaves Serbia or the European Economic Area.

1. Infrastructure

  • Vercel Inc. (United States) — application hosting and edge delivery. Transfers protected by Standard Contractual Clauses.
  • Supabase Inc. (United States; database hosted in the EU) — managed Postgres, authentication and file storage. This is where workspace content and account data live. Transfers protected by Standard Contractual Clauses.
  • Render Services Inc. (United States) — hosts the relay that on-premise agents dial out to. It carries request and response payloads for on-prem systems in transit; it does not store them. Transfers protected by Standard Contractual Clauses.

2. AI model providers

Which of these processes your data depends on the models configured for your workspace. Under our agreements, none of them uses your data to train their models.

  • Anthropic PBC (United States) — Claude models.
  • OpenAI, L.L.C. (United States) — GPT models.
  • Google LLC (United States) — Gemini models.
  • Additional providers (Mistral AI SAS, France; DeepSeek; Moonshot AI; Cohere Inc., Canada; Groq Inc.; Together Computer Inc.; Perplexity AI Inc.; Microsoft Corporation) — only where an administrator has explicitly configured that provider for the workspace.

Transfers outside the EEA are protected by Standard Contractual Clauses. A workspace that must avoid a given provider can simply not configure it.

3. Communications

  • Resend, Inc. (United States) — transactional e-mail only: invitations, password resets and scheduled report delivery. Transfers protected by Standard Contractual Clauses.

4. Web tools

  • Tavily (United States) — web search, page reading and crawling, used only when a workspace has web tools enabled and only for the query at hand. Transfers protected by Standard Contractual Clauses.

5. Analytics — only with your consent

These run on our public pages only (the landing, pricing and legal pages), never inside the signed-in application, and only after you opt in via the consent banner.

  • Google Ireland Ltd. (Ireland) — Google Analytics.
  • Microsoft Ireland Operations Ltd. (Ireland) — Microsoft Clarity.

6. Changes to this list

We notify customers before a new sub-processor starts processing personal data, with at least 30 days of notice, so there is time to object. To receive those notices, write to ai@meteorit.rs and ask to be added to the sub-processor notification list.

A customer who reasonably objects to a new sub-processor on data-protection grounds may raise it with us, and where we cannot offer an alternative the customer may terminate the affected part of the service.

7. Data processing agreement

A data processing agreement covering Art. 28 GDPR, including the Standard Contractual Clauses referred to above, is available on request from ai@meteorit.rs.