Use Cases
Products

Subprocessors

Last updated: November 11, 2026

Team You, Inc (“TeamYou”) uses the companies below to help run its service. Each one processes personal data for us, under a contract that limits it to that job. This page says what each one does, what data it receives, where it processes that data, and which safeguard covers data that comes from the European Economic Area, the United Kingdom or Switzerland.

Transfer safeguards

  • Data Privacy Framework: the vendor is certified under the EU-U.S. Data Privacy Framework, with its UK Extension and the Swiss-U.S. framework. Where it is listed first, the Standard Contractual Clauses in the vendor’s terms are the fallback.
  • Standard Contractual Clauses: the vendor’s data processing terms include the clauses approved by the European Commission, with the UK addendum.
  • Processed in the EEA: the vendor is established in the European Economic Area and keeps the data there.

For every account

These vendors help run the TeamYou app, website and API. Unless a row says otherwise, they process data about everyone who has an account.

  • Clerk

    Clerk, Inc., United States

    What it does
    Sign-up, sign-in and sessions; sign-in emails; authorizing the agents and apps you connect.
    Data it receives
    Name, email addresses, profile picture, sign-in method, session and device details.
    Where it is processed
    United States
    Transfer safeguard
    Data Privacy Framework; Standard Contractual Clauses

    Clerk’s data protection terms

  • Neon

    Databricks, Inc. (parent of Neon, LLC), United States

    What it does
    The database that stores your account and everything in it.
    Data it receives
    All account data and content: topics, details, tasks, projects, areas, documents, comments, agent records and settings.
    Where it is processed
    United States (AWS, Oregon)
    Transfer safeguard
    Data Privacy Framework; Standard Contractual Clauses

    Neon’s data protection terms

  • Vercel

    Vercel Inc., United States

    What it does
    Hosting for the app, website and API; background jobs; request logs; the AI Gateway that routes requests to AI models.
    Data it receives
    Everything sent to or from TeamYou passes through it. Request logs include IP addresses.
    Where it is processed
    United States
    Transfer safeguard
    Data Privacy Framework; Standard Contractual Clauses
    Note
    The AI Gateway does not keep the text of requests or responses after a request completes.

    Vercel’s data protection terms

  • OpenAI

    OpenAI OpCo, LLC, United States

    What it does
    Reached through the Vercel AI Gateway: writes the summary and outline of a topic.
    Data it receives
    The name, description and details of a topic, when its summary or outline is written. No name, email address or account ID is sent with it.
    Where it is processed
    United States
    Transfer safeguard
    Standard Contractual Clauses
    Note
    OpenAI does not use data sent through its API to train its models, and may keep it for up to 30 days to monitor for abuse.

    OpenAI’s data protection terms

  • Microsoft Azure

    Microsoft Corporation, United States

    What it does
    Reached through the Vercel AI Gateway: runs the OpenAI model that turns text into search indexes (embeddings).
    Data it receives
    The text of topics, details, tasks, documents and search queries. No name, email address or account ID is sent with it.
    Where it is processed
    Azure data centers chosen by Vercel, which does not publish their locations
    Transfer safeguard
    Data Privacy Framework
    Note
    These requests are sent with zero data retention: the text is not kept after the index is made, is not used to train models, and is not available to OpenAI.

    Microsoft Azure’s data protection terms

  • PostHog

    PostHog, Inc., United States

    What it does
    Product analytics; session replay on public pages only; delivery of the emails TeamYou sends, such as document invitations.
    Data it receives
    Account ID, email address, pages viewed and clicks, browser and device details, IP address. For an invitation: the recipient’s email address, the sender’s first name and the document title.
    Where it is processed
    United States (AWS, Virginia)
    Transfer safeguard
    Data Privacy Framework; Standard Contractual Clauses

    PostHog’s data protection terms

  • Stripe

    Stripe, LLC, United States

    What it does
    Subscriptions, payments and invoices.
    Data it receives
    Name, email address, account ID and plan for every account, including free ones. Card and billing details are entered on Stripe’s own pages and never reach TeamYou.
    Where it is processed
    United States
    Transfer safeguard
    Data Privacy Framework; Standard Contractual Clauses

    Stripe’s data protection terms

  • Featurebase

    CORDNET OÜ, Estonia

    What it does
    The feedback widget inside the app.
    Data it receives
    Name, email address, account ID, profile picture, and the feedback you send.
    Where it is processed
    European Economic Area (Netherlands, Germany, Ireland)
    Transfer safeguard
    Processed in the EEA; Standard Contractual Clauses
    Note
    Featurebase uses the Standard Contractual Clauses for its own vendors outside the EEA.

    Featurebase’s data protection terms

  • Slack

    Slack Technologies, LLC (Salesforce), United States

    What it does
    Our team’s internal channel for support requests, managed-agent requests and operations alerts.
    Data it receives
    For a support request: name, email address, subject and message. For a managed-agent request: name, email address, company and notes. Only people who send one.
    Where it is processed
    United States
    Transfer safeguard
    Data Privacy Framework; Standard Contractual Clauses

    Slack’s data protection terms

  • Doppler

    Doppler Technologies, Inc., United States

    What it does
    Secret storage: the token for a check-in nudge you set up, and the credentials of managed agents.
    Data it receives
    Account or agent ID, and the tokens themselves. Only accounts that set up a check-in nudge or have a managed agent.
    Where it is processed
    United States
    Transfer safeguard
    Standard Contractual Clauses

    Doppler’s data protection terms

For managed agents (TeamYou Pro)

These vendors are used only when TeamYou hosts an agent for you. If you connect your own agent, none of them receives your data.

  • Anthropic

    Anthropic, PBC, United States

    What it does
    AI models for a managed agent that is set to use Claude, reached through the Vercel AI Gateway.
    Data it receives
    The instructions and content the agent sends to the model to do its work.
    Where it is processed
    United States
    Transfer safeguard
    Standard Contractual Clauses
    Note
    Anthropic does not train its models on data sent through its commercial API, and deletes it within 30 days by default.

    Anthropic’s data protection terms

  • DigitalOcean

    DigitalOcean, LLC, United States

    What it does
    The servers that managed agents run on.
    Data it receives
    The agent’s workspace and memory, its conversations, and the encrypted credentials of accounts you link to it.
    Where it is processed
    United States (San Francisco)
    Transfer safeguard
    Data Privacy Framework; Standard Contractual Clauses

    DigitalOcean’s data protection terms

  • Hetzner

    Hetzner Online GmbH, Germany

    What it does
    An alternative host for the servers that managed agents run on.
    Data it receives
    The same as DigitalOcean, for an agent hosted here.
    Where it is processed
    United States (Hillsboro, Oregon)
    Transfer safeguard
    Standard Contractual Clauses

    Hetzner’s data protection terms

  • Cloudflare

    Cloudflare, Inc., United States

    What it does
    The network connection and DNS in front of a managed agent, where the agent is set up to use it.
    Data it receives
    Traffic between you and your agent, and the IP addresses it comes from.
    Where it is processed
    Global network; stored in the United States and Europe
    Transfer safeguard
    Data Privacy Framework; Standard Contractual Clauses

    Cloudflare’s data protection terms

  • Tailscale

    Tailscale Inc. or Tailscale US Inc., Canada or United States

    What it does
    The private network between a managed agent’s servers, and its public web address.
    Data it receives
    Device and connection details. Traffic is relayed encrypted; Tailscale cannot read it.
    Where it is processed
    United States, Canada, Germany and the United Kingdom
    Transfer safeguard
    Standard Contractual Clauses

    Tailscale’s data protection terms

  • Backblaze B2

    Backblaze, Inc., United States

    What it does
    Backups of managed agents, and the export archive made when one is closed.
    Data it receives
    Backups of the agent’s workspace and server, which are encrypted before they are uploaded. The export archive is uploaded as it is, and Backblaze encrypts it when stored.
    Where it is processed
    United States (US West)
    Transfer safeguard
    Data Privacy Framework; Standard Contractual Clauses

    Backblaze B2’s data protection terms

Who is not on this list

  • Agents and apps you connect yourself. When you connect your own AI agent, its provider receives what the agent reads, under your agreement with that provider. It is not our subprocessor.
  • Accounts you link to a managed agent. The same applies to an AI provider, Google or messaging account that you link to an agent we host.
  • Google, when you sign in with Google. Google confirms who you are under its own privacy policy.
  • Our vendors’ own vendors. Several companies above run on cloud providers such as Amazon Web Services and Google Cloud. Each vendor’s terms list its own subprocessors.

Changes to this list

We update this page before a new subprocessor starts to process personal data. For customers covered by our Data Processing Agreement, that is at least 10 business days before, and you have 30 days to object. To be told about changes by email, or to object to one, write to privacy@teamyou.ai.

How we use personal information is described in our Privacy Policy.