Sub-processors
Last updated: April 18, 2026
Archon uses the third-party service providers listed below ("Sub-processors") to deliver the Service. We engage each Sub-processor under a written agreement that requires at minimum the same level of data protection as set out in our Data Processing Addendum. See our Privacy Policy and DPA.
We will provide at least 30 days' advance notice of any new Sub-processor by updating this page. To receive notifications, subscribe by emailing romil@regnor.systems. If you have a reasonable objection to a new Sub-processor, contact us within the notice period.
Anthropic, PBC
Website ↗- Purpose
- Claude LLM for SOP generation, compliance review, and gap detection.
- Data
- SOP content, company profile, prompts, user identifiers.
- Location
- United States
OpenAI, L.L.C.
Website ↗- Purpose
- Whisper transcription for voice input; embeddings for company-memory retrieval.
- Data
- Voice audio (transient), document text, embeddings.
- Location
- United States
Supabase, Inc.
Website ↗- Purpose
- Primary database (PostgreSQL + pgvector for document embeddings), authentication, and file storage.
- Data
- Account data, SOPs, uploaded documents, document embeddings, audit logs.
- Location
- United States (with EU region available on enterprise plans)
Vercel Inc.
Website ↗- Purpose
- Frontend web hosting and content delivery.
- Data
- Request metadata, IP address, user-agent, deployment logs.
- Location
- Global edge network; origin in the United States
Railway Corp.
Website ↗- Purpose
- Backend API hosting.
- Data
- Request metadata, application logs.
- Location
- United States
Dodo Payments
Website ↗- Purpose
- Payment processing and subscription billing.
- Data
- Name, email, billing address, transaction metadata. No card data stored by Archon.
- Location
- United States
PostHog Inc.
Website ↗- Purpose
- Product analytics (loaded only with user consent).
- Data
- Pseudonymous event data, session replays (if enabled), feature usage.
- Location
- United States / EU (self-hosted region selectable)
Resend, Inc.
Website ↗- Purpose
- Transactional email delivery (approvals, notifications, receipts).
- Data
- Email address, message content, delivery metadata.
- Location
- United States
International transfers of EU/UK personal data to U.S.-based Sub-processors are made under the European Commission's Standard Contractual Clauses (2021/914) and the UK International Data Transfer Addendum where applicable.