Sub-processors
Third parties Onnie uses to deliver the service, and the categories of data they may handle.
English only.
Effective October 7, 2026 · Last updated October 7, 2026
This page is Onnie’s public sub-processor list. It is not a countersigned Data Processing Agreement.
Formal DPA or processing questions: legal@onnie.ai.
Connectors a customer enables that are not named here are that provider’s processing under the customer’s configuration.
Material list changes: we email workspace owners at least 14 days in advance.
| Processor | Purpose | Data categories | Region | Privacy policy |
|---|---|---|---|---|
| Supabase | Postgres, authentication, realtime; Vault for connector OAuth tokens | Accounts, workspace data, messages, files, session tokens; encrypted connector secrets in Vault | US (AWS us-east-1) | View |
| Vercel | Hosting for the product app and marketing site, edge network | IP addresses, request logs, deployed application traffic | Global (edge) | View |
| Cloudflare | Engine (Workers and Durable Objects); R2 for chat attachments and Drive files; edge protection as used | Request metadata, engine payloads, stored object and file data | Global (edge) | View |
| E2B | Guest computer for jobs — isolated machine where an agent runs the work | Job files, commands, and workspace context sent into the guest computer | US | View |
| Anthropic | Model inference (Claude) when a run is routed there | Chat and agent messages, and workspace context sent as model input | US | View |
| OpenAI | Model inference when a run is routed there (Chat and jobs) | Chat and agent messages, and workspace context sent as model input | US | View |
| xAI | Model inference (Grok) when a run is routed there | Chat and agent messages, and workspace context sent as model input | US | View |
| Gemini (including image); Gmail, Calendar, and Drive connectors. OAuth tokens in Vault. OAuth is not account login. | Model inputs/outputs; connector content under granted scopes; OAuth tokens in Vault | Global | View | |
| Notion | Notion connector. OAuth tokens in Vault. | Workspace content under granted scopes; OAuth tokens in Vault | US / Global | View |
| Make | Make connector — run and manage scenarios in the connected organization. OAuth tokens in Vault. | Scenario configuration and execution payloads under granted scopes; OAuth tokens in Vault | EU / Global | View |
| Firecrawl | Web search and scrape for agents | Search queries, target URLs, retrieved page content | US | View |
| Resend | Transactional email (magic links, invites, notices) | Email addresses, email content | US | View |
| Dodo Payments | Merchant of record — subscriptions and extended usage | Billing email, subscription status, payment method metadata (no raw card data) | US | View |