Legal
Subprocessors
Effective October 27, 2026
These are the companies that process customer data for us to run Archon. Each is bound by a written agreement with data protection terms.
1. Current subprocessors
| Provider | What it does for Archon | Data | Location |
|---|---|---|---|
| Amazon Web Services, Inc. | Runs the API, database, cache, queues, object storage and Hosted by Archon apps and agents | All customer data at rest and in use | Australia (Sydney, ap-southeast-2); India (Mumbai) planned |
| Amazon Web Services, Inc. (Amazon SES) | Sends account email: sign-in codes, invitations, notices, usage warnings | Name, email address, message content | Australia (Sydney) |
| Vercel Inc. | Hosts the web app and its server functions, which carry sign-in sessions and pass requests to the API | Everything shown in or sent through the web app, in transit | India (Mumbai) for server functions; global edge network |
| Cloudflare, Inc. | DNS for Archon's domains and certificates for hosted apps | Domain names; no customer content | Global |
| Paddle.com Market Ltd | Reseller and merchant of record: checkout, payments, tax, invoices (an independent controller for buyer data) | Billing contact, address, tax ID, payment details, purchase history | United Kingdom; global |
| OpenRouter, Inc. | Routes Archon-paid AI model requests to model providers, restricted to providers that do not store or train on prompts | The session context an agent or Archon's assistant sends to a model | United States |
| Model providers reached through OpenRouter (for example Anthropic, OpenAI, Google) | Generate AI replies | Same as above, for the request being answered | United States and other provider regions |
2. Services you choose
When you connect your own service (a sign-in provider such as Google or GitHub, a code host, your cloud account, your own AI model key, an MCP server or another integration), data goes to it on your instructions and under your agreement with that provider. Those providers are not our subprocessors.
3. How we announce changes
We update this page before a new subprocessor starts processing customer data, and:
- email the owners of workspaces that have accepted the Data Processing Agreement, and anyone subscribed, at least 30 days in advance (except in an emergency, when we tell you as soon as we can);
- change the effective date at the top of this page, so you can watch it for changes.
To subscribe, email privacy@joinarchon.com with the subject "Subprocessor updates". Under the Data Processing Agreement you may object to a new subprocessor on reasonable data protection grounds within the notice period; if we cannot address the objection, you may end the affected service and get a pro-rata refund of prepaid fees for it.