Subprocessor List
1. Introduction
To provide the Foreman AI orchestration platform, we engage third-party service providers ("Subprocessors") to process data on our behalf. We maintain rigorous standards for any partner that handles your workspace data.
2. Authorized Subprocessors
The following entities are authorized to process data as part of the Beta Service operations:
| Subprocessor | Purpose | Data Categories Processed | Region |
|---|---|---|---|
| Neon | PostgreSQL database hosting | Workspace configurations, user accounts, agent memory, operational logs | United States |
| Stripe | Payment processing | Billing details, subscription state, invoice history | United States |
| OpenAI | LLM inference and orchestration | Prompts, business context, tool execution results (transiently) | United States |
| DeepInfra | LLM inference (Open weights) | Prompts, conversation excerpts (transiently) | United States |
| OpenRouter | LLM model routing and fallback | Prompts, payloads requested during capability escalations (transiently) | United States |
| Composio | Third-party integrations and tool execution | OAuth tokens, execution payloads between agents and external platforms | United States |
| Floot | Application hosting and runtime infrastructure | App state, static assets, user requests | United States |
| Tavily | Web content extraction and search | Search queries, specified URLs requested by agents | United States |
3. Bring Your Own Key (BYOK)
If you utilize Bring Your Own Key (BYOK) functionality to connect directly to an LLM provider (such as OpenAI, Anthropic, or Google), data transmitted using your key is governed by your direct relationship and Data Processing Agreement with that specific provider. In such cases, they act as your direct processor, rather than our subprocessor, for inference data.
4. Updates to this List
We will update this list as our infrastructure evolves. Continued use of the platform after updates indicates your acknowledgment of these subprocessor additions.