Subprocessors
Brain Agents AI uses a small number of third-party vendors to operate the Service. This page lists every vendor that processes data on behalf of customers, what each one accesses, and the region in which that processing occurs.
The list is segmented by data type rather than presented as a flat table. Most subprocessors do not touch customer billing data; the segmentation makes that visible. Two vendors process customer billing data, four process account or personal data only, and one collects anonymous marketing-site analytics only.
For context on what "customer billing data" means here: Brain Agents AI reads cost and optimization data from connected customer cloud accounts (GCP, AWS, Azure) on a read-only basis. This includes line-item billing data, optimization recommendations from each cloud's native advisors, and the resource metadata required to interpret cost data. It does not include customer code, workload contents, databases, storage objects, network traffic, secrets, or end-user data. The subprocessors below are the only third parties that touch any of this data.
Subprocessors with access to customer billing data
These vendors process the cost and optimization data that Brain Agents AI reads from connected customer cloud accounts. All processing occurs in Google Cloud us-east1. Each customer workspace is stored in its own isolated BigQuery dataset; cross-workspace queries are not possible.
| Vendor | Purpose | Data accessed | Region |
| --- | --- | --- | --- |
| Google Cloud | Compute, storage, databases, BigQuery, Firestore, logging, identity | Customer billing data, normalized cost data, workspace configuration, audit logs | United States (us-east1) |
| Vertex AI | Gemini family of models; AI features for authenticated users only | Prompts and completions for AI features (Cost Scout, Savings Advisor, AI Cost Analyst, support chat). Prompts may include cost and optimization data scoped to the requesting workspace. | United States (Google Cloud) |
Subprocessors with access to account or personal data only
These vendors process account information such as authentication identifiers, email addresses, and payment metadata. They do not have access to customer billing data ingested from connected cloud accounts.
| Vendor | Purpose | Data accessed | Region | | --- | --- | --- | --- | | Google Cloud Identity Platform / Firebase Auth | Authentication | Email address, password hash, authentication tokens, sign-in metadata | United States | | Resend | Transactional email and internal operational alerts | Recipient email address, message content for transactional and operational mail | United States | | Stripe | Payment processing | Billing contact, subscription and invoice metadata. Card data is collected directly by Stripe and never touches Brain Agents AI infrastructure. | United States | | Cloudflare | Edge, DDoS, and bot management; sees encrypted traffic in proxied mode | Request metadata (IP address, user agent, TLS handshake); traffic content remains encrypted end to end | United States |
Subprocessors with access to marketing-site visitor data only
These vendors collect anonymous analytics on the public marketing site. They are not loaded on authenticated application routes and do not have access to customer accounts or billing data.
| Vendor | Purpose | Data accessed | Region | | --- | --- | --- | --- | | Google LLC (Analytics) | GA4, privacy-minimized configuration | Anonymous page-view and event data on marketing routes only | United States |
What is not on this list
A small number of vendors are intentionally excluded from this list because they do not act as data processors for customer data:
- DNS and domain registrar. Treated as infrastructure. The registrar does not process customer data; it resolves the public domain.
- Cloud Logging. Part of the Google Cloud entry above; not listed separately because the data plane and provider are the same.
- Operational email used by Brain Agents AI internally (e.g., founder communications). This email infrastructure is separate from the customer-facing Resend integration above and is not in the path of any customer data.
If a future vendor enters the path of customer data, it will be added to this page before processing begins.
Change notifications
We will notify customers of material changes to this subprocessor list via email.
Processor obligations
Privacy and processing terms are set out in our Terms of Service and Privacy Policy. Brain Agents AI maintains direct contractual relationships with each subprocessor that includes appropriate data protection commitments.
Last updated: April 28, 2026.