Sub-Processors
Last updated: October 1, 2026
Alpine Anchor, LLC (“Alpine Anchor”) uses certain sub-processors to assist it in providing the Alpine Anchor Horizon Platform and the services as described in the Terms of Service and/or the applicable Order Form.
1. What is a Sub-Processor
In GDPR terminology, Alpine Anchor is a processor of personal data submitted by users of its services for processing on the Alpine Anchor Horizon Platform. Alpine Anchor may in turn delegate some aspects of processing to another processor, either an Affiliate or a third party: this is termed a sub-processor. A sub-processor is a data processor engaged by Alpine Anchor which has or potentially will have access to such personal data. Alpine Anchor engages different types of sub-processors to perform various functions as explained in the table below. Third parties used to provide the services but which do not have access to or process such personal data are not considered sub-processors.
2. Due Diligence
Alpine Anchor undertakes to use a commercially reasonable selection process by which it evaluates the security, privacy and confidentiality practices of proposed sub-processors that will or may have access to or process personal data. Alpine Anchor has signed data processing agreements with OpenAI, OpenRouter, and Anthropic.
3. List of Sub-processors
Alpine Anchor Affiliates, (as well as other Affiliates to be appointed from time to time) may act as sub-processors for personal data submitted by users for processing on the Alpine Anchor Horizon Platform. In addition, Alpine Anchor uses certain unaffiliated third parties to perform specific processing functions related to its services. These unaffiliated third-party providers are the sub-processors set forth below.
| Sub-processor Name | Purposes | Locations | Website |
|---|---|---|---|
| Hetzner Online GmbH | Production servers that run the Horizon application and AI agent services | United States (Ashburn, Virginia) | https://www.hetzner.com |
| Supabase, Inc. | Production database and file storage, including uploaded files and meeting audio | United States (US East) | https://supabase.com |
| Cloudflare, Inc. | DNS, network ingress to our production servers, and custom domains for agent-built sites | United States and other locations (global network) | https://www.cloudflare.com |
| Clerk, Inc. | User authentication, sign-in, multi-factor authentication, and organization membership | United States and other locations (see https://clerk.com/legal/subprocessors) | https://clerk.com |
| OpenRouter, Inc. | Routing of requests to AI model providers for Horizon’s AI features (agents, chat, meeting notes, document extraction), only to model endpoints committed to zero data retention and no training | United States | https://openrouter.ai |
| OpenAI, LLC | AI models for Horizon’s AI features (through OpenRouter) | United States | https://openai.com |
| Anthropic, PBC | AI models for Horizon’s AI features (through OpenRouter and directly) | United States | https://www.anthropic.com |
| Google LLC (Gemini models) | AI models for Horizon’s AI features, including document extraction (through OpenRouter) | United States and other locations | https://ai.google.dev |
| AssemblyAI, Inc. | Speech-to-text transcription of meeting recordings, read through a short-lived link; no model training; transcript deleted as soon as Horizon receives it, with retention limited to one day as a safeguard | United States | https://www.assemblyai.com |
| Resend | Transactional email delivery, such as invitations and notifications | United States | https://resend.com |
| Apple Inc. (Apple Push Notification service) | Delivery of push notifications to the Horizon iOS app | United States and other locations | https://www.apple.com |
| Google LLC (Google Maps Platform) | Address autocomplete, place details, and route calculation | United States and other locations | https://mapsplatform.google.com |
| Microsoft Corporation (Bot Framework) | Delivery of messages between Microsoft Teams and Horizon agents | United States and other locations | https://dev.botframework.com |
| PostHog, Inc. | Product and website analytics, including masked session replay and heatmaps, server-side error reports, and application logs | United States | https://posthog.com |
| Stripe, Inc. | Payment processing (only for payments made by credit card) | United States | https://www.stripe.com |
| Salesforce, Inc. | Customer relationship management (managing prospect and customer contact information) | United States | https://www.salesforce.com |
| Google LLC (Google Workspace) | Business email, document storage and collaboration used to communicate with and support users | United States | https://workspace.google.com |
| Google LLC (Google Analytics and Google Ads) | Website analytics and online advertising on our marketing websites (measuring site usage and delivering and measuring our advertisements) | United States | https://policies.google.com/privacy |
Production customer data is hosted in the United States, on the production hosts listed above: Hetzner servers in Ashburn, Virginia, and Supabase database and storage in the US East region, with Cloudflare carrying network traffic.
Horizon is an AI-driven service. Before Horizon’s AI features process a user’s data, each user is asked to agree at first sign-in, on the web and in the iOS app; that consent covers sharing data with the AI providers listed above (OpenRouter, OpenAI, Anthropic, and Google). See our Services Privacy Policy.