Sub-processors
Last reviewed:
Kiantu uses a small number of third-party services to deliver the product. We list every one below, with the data each receives. This page is updated whenever a sub-processor is added or removed; for advance notice of changes (e.g. for an enterprise contract), write to privacy@kiantu.com.
| Provider | Purpose | Location | Data shared |
|---|---|---|---|
| Google Cloud Platform | Cloud hosting and storage | United States | All workspace data at rest; application-encrypted PII is not readable by the provider. |
| Resend | Transactional email (login links, invites, digests) | United States | Recipient email address and name, subject and body of each email |
| OpenAI | LLM provider for insights and inference features | United States | The workspace text needed for the specific request (e.g. session titles and notes), only for the duration of the request. Not used for model training. |
| Anthropic | LLM provider for insights and inference features | United States | Same scope as OpenAI when active; otherwise no data is shared. |
| PostHog | Product analytics | United States | Anonymised usage events with internal identifiers only — no email addresses, no session contents. |
| GitHub | Optional sign-in and optional activity connector | United States | Only the profile and event metadata you explicitly authorise; repository contents are never read. |
| Google (sign-in & Calendar) | Optional sign-in and optional calendar connector | United States | Calendar event metadata (titles, attendees, times) for events you authorise us to read. |
| Microsoft | Optional sign-in | United States | Email address and basic profile only. |
Data residency
All sub-processors operate from the United States today. EU residency is on the roadmap; EU-specific deployments will be listed here when they ship.