Sub-processors
Last updated August 18, 2026
Alloy Systems, Inc. ("Alloy," "we," "us") engages the third parties listed below to help deliver the Alloy service. Each of these sub-processors may process Customer Data on our behalf, in each case limited to what is necessary for the purpose described.
This page describes Alloy's hosted (cloud) service. Customers who run Alloy in a dedicated VPC, in their own cloud account, or on their own infrastructure control their own environment, and the infrastructure sub-processors below do not apply to those deployments. Model providers configured by customers are not sub-processors engaged by Alloy and are described separately below.
Infrastructure
| Sub-processor | Purpose | Data processed | Location |
|---|---|---|---|
| Hetzner Online GmbH | Cloud infrastructure hosting: application servers, database, and S3-compatible object storage | All Customer Data stored by the Alloy hosted service, including messages, files, and workspace content | Germany (EU) |
| Amazon Web Services (AWS) | Off-site backup copies of the database and object storage, encrypted before transfer | Backup copies of all Customer Data stored by the Alloy hosted service | Germany (EU), eu-central-1 |
| Cloudflare, Inc. | Reverse proxy and content delivery network in front of the public Alloy endpoints; terminates TLS at the edge | Traffic to and from the Alloy hosted service, including request metadata and content in transit | Global edge network |
Model providers
Alloy does not engage model providers as sub-processors. AI teammates send prompt content to the provider configured for the customer's organisation, using an API key the customer supplies. Providers that can be configured include OpenAI, Anthropic, Google, DeepSeek and OpenRouter, which routes requests to further providers according to the model selected; OpenAI Codex can be connected by device-code sign-in; and a provider at any other endpoint can be configured by entering its base URL and key. The relationship for that processing is between the customer and the provider they have chosen: the customer accepts that provider's terms and controls where the content goes and how long it is kept. On Alloy's hosted service, prompt content passes through Alloy's infrastructure as described under Infrastructure above.
Conversation content is stored in Alloy's own infrastructure as described under Infrastructure above. Alloy does not additionally retain the assembled prompt payload or the provider's raw response beyond the conversation itself.
Operational services
| Sub-processor | Purpose | Data processed | Location |
|---|---|---|---|
| Google (Google Workspace) | Corporate email and documents used by Alloy staff; customer correspondence sent to Alloy addresses is received here | Content of messages customers send to Alloy | EU and other Google regions per Workspace data-region settings |
| FoundryLabs, Inc. (E2B) | Sandboxed code execution for AI teammate tool use | Code and data supplied to a code-execution step by a workflow or AI teammate | United States |
| Functional Software, Inc. d/b/a Sentry | Application error monitoring and diagnostics | Error reports and diagnostic metadata, which may incidentally include user identifiers | European Union |
| MailerSend, Inc. | Transactional email delivery | Recipient email address and the contents of transactional messages such as sign-in and notification emails | United States |
Integrations you choose to connect
Alloy connects to third-party systems — such as Slack, Google Workspace (Gmail, Drive, Calendar), Microsoft Teams, and Telegram — only when a customer explicitly enables that integration. When you connect one, data flows between Alloy and that system as needed to operate the integration, and the third party's own terms and privacy policy govern its handling of your data. Disconnecting an integration stops that data flow. These customer-connected providers are not engaged by Alloy as sub-processors in that integration role; they act on your instruction as a system you already use. Google Workspace's separate role as Alloy's corporate email and document service is listed under Operational services above.
Changes to this list
We update this page when we add or replace a sub-processor. Customers with an active subscription may request advance notice of changes by contacting us, and may raise a reasonable objection to a new sub-processor as set out in their agreement with Alloy.
Contact
Questions about this list, or about how we process personal information, can be sent to us using the details in our Privacy Notice.