
Subprocessor List
Version 1.0-draft · Effective: [to be set at launch] · Updated upon any subprocessor change, with customer notice for B2B customers under the DPA.
Purpose
This list identifies the subprocessors engaged to deliver Aequitas EU Market Passport, with location, data processed and transfer mechanism. B2B customers are notified of changes per the Data Processing Agreement, with the right to object.
Current subprocessors
[Hosting provider placeholder] — infrastructure hosting — [location] — account, assessment and report data — [transfer mechanism]. [LLM provider placeholder] — AI-assisted report drafting and document summarisation — [location] — prompts and document excerpts (no-training processing) — [transfer mechanism]. [Payment processor placeholder] — billing — [location] — billing data — [transfer mechanism]. [Email provider placeholder] — transactional email — [location] — contact data — [transfer mechanism].
Assessment
Every subprocessor passes the AI Vendor / LLM Provider Assessment Checklist (for AI providers) and a security and transfer review before onboarding; a DPA is in place with each.