Legal/Document

Alle Rechtsdokumente sind nur auf Englisch verfügbar. Rechtlich verbindlich ist ausschließlich die englische Version.

Mit Google Übersetzer übersetzenöffnet sich in einem neuen Tab; nur zur Orientierung

Sub-processors

The service providers that process personal data for the Intramedial service, what each does and where, and how we give notice of changes.

Last updated November 5, 2026.

1. What this page is#

The service providers that process personal data for the Intramedial service on behalf of Avonao, Inc. This list is the sub-processor list referred to in the Data Processing Addendum that forms part of the Terms of Service.

In plain language: these are the companies that help us run the Service and handle some of your data. We tell account owners 30 days before we add one.

Intralock · Leases · Parley · Fleet Map

A Trustvice Product

Agenten handeln, wenn die Ebene Ja sagt – und das Protokoll sagt, warum.

Leiten Sie Agent-Aktionen, Inhalts-Hashes, API-Checks, DNS-Abfragen, Webhooks, LLM-Aufrufe und Git-Commits über Intramedial – für einen signierten Beleg, den jeder prüft, ohne uns zu vertrauen.

Registrieren Module entdecken

Provider	Purpose	Location	Personal data involved	Safeguards
Cloudflare, Inc.	Hosting and compute (Workers), databases (D1) and per-workspace storage (Durable Objects), object storage (R2, for support attachments, archives and signed ledger bundles), key-value storage (KV), queues, CDN, DNS, DDoS protection, assistant retrieval (Workers AI and Vectorize) and the Cloudflare Email service we send transactional email through	Workspace data (the coordination record, audit chain and ledger) is stored and processed in the workspace's chosen region. Seven regions are deployed: US East, US West, Europe Central, Europe West, Europe North, Asia-Pacific and Oceania. The three European regions are created under Cloudflare's EU jurisdiction (the data stays in the EU; Cloudflare chooses the datacenter); the other four use a location hint, which is a request and not a guarantee. Account data, sign-in links and the dashboard: the home region of the account, plus the global edge network for request termination. Key-value storage, queues and the retrieval index are not pinned to a region and hold no customer content beyond short-lived tokens, counters, configuration and event payloads in transit. The public website and documentation (no customer data): United States. See Data regions	Account data, credentials, agent and fleet records, coordination records, ledger bundles, security audit log, operational logs, support attachments, email address and message content, and the questions typed to the assistant	Standard Contractual Clauses and UK Addendum in Cloudflare's data processing agreement; certified under the EU-US Data Privacy Framework, the UK Extension and the Swiss-US Framework
Cloudflare, Inc. (Turnstile)	Bot protection on sign-up and on public forms	United States / global edge	IP address, browser signals, the challenge token	As for Cloudflare above
Avonao Billing (Avonao Wallet) and Stripe, Inc.	Payments, subscriptions, invoices and tax, through Avonao Billing, where Stripe is the merchant of record	United States, and other locations where Stripe operates. Billing is not regional: payments, invoices and tax are handled in the United States	Billing contact and address, tax details, card data (entered at Stripe only), account email, plan and subscription data	Standard Contractual Clauses and UK Addendum in Stripe's data processing agreement; certified under the EU-US Data Privacy Framework, the UK Extension and the Swiss-US Framework
Google LLC (analytics)	Website analytics (Google Analytics 4), only after you allow Statistics	United States	Pseudonymous browsing data: cookie identifiers, pages visited, approximate location, browser and device type	Standard Contractual Clauses; certified under the EU-US Data Privacy Framework; consent required before it loads
Adobe Inc. (Adobe Fonts)	The typeface of the website's titles, in the EU, EEA, Switzerland and UK only after you allow Fonts; elsewhere directly	United States / global CDN	IP address, the address of the page, browser type	Standard Contractual Clauses in Adobe's data processing terms; Adobe Inc. participates in the EU-US Data Privacy Framework, as Adobe documents; consent required before it loads
Amazon Web Services EMEA SARL / Amazon Web Services, Inc. (S3, KMS and Aurora)	Customer data only for Scale, Enterprise and the isolation add-on: each workspace's own AWS database (Amazon Aurora, strict tenant isolation), which holds its account data, workspace data, receipts and ledger events; cold archive storage of workspace data (Amazon S3 Deep Archive, encrypted at rest); key management for the secrets stored by the control plane (AWS KMS wraps the keys that seal them); for dedicated-location workspaces, a per-workspace Aurora Serverless database in the AWS region chosen. Workspaces on Free, Starter, Pro, Pro+ and Team keep all their data, receipts included, on Cloudflare D1	The AWS region chosen for each Scale, Enterprise or add-on workspace, the AWS region the customer chooses for a dedicated location, and the archive regions US West (Oregon), US East (N. Virginia), Europe (Ireland), Europe (Frankfurt), Asia Pacific (Singapore), Asia Pacific (Tokyo), Asia Pacific (Sydney) and Asia Pacific (Melbourne)	Archived workspace data; stored third-party secrets (sealed; AWS sees only wrapped keys); dedicated-location workspace data; receipts and ledger events of Scale, Enterprise and add-on workspaces	Standard Contractual Clauses and UK Addendum in the AWS Data Processing Addendum; Amazon Web Services, Inc. participates in the EU-US Data Privacy Framework, the UK Extension and the Swiss-US Framework, as AWS documents
Resend, Inc.	Transactional email (billing notices, request acknowledgements), used only as a fallback when Cloudflare Email cannot deliver	United States	Email address, message content	Standard Contractual Clauses in Resend's data processing agreement
Anthropic, PBC	The language model behind Number One, the assistant on the website and in the dashboard (Claude Haiku 5.5; Claude Sonnet 5.5 for the dashboard's deeper mode)	United States. The website assistant receives only what a visitor types. The dashboard assistant reads workspace records only for workspaces in the US data regions, with inference pinned to US infrastructure; workspaces in other regions get documentation answers only	Website: the questions typed into the chat (at most the last six turns), the page and the language, with a pseudonymous identifier and no email address or IP address. Dashboard: the signed-in customer's questions and, when it looks something up, the records it reads (usage, agents, leases, admissions, key prefixes, team members, plan, support tickets). Never passwords, key secrets or card data	Anthropic's commercial terms and data processing addendum, which include Standard Contractual Clauses; under the commercial terms Anthropic does not train its models on content sent through the API

Provider	Purpose	Location	Personal data involved	Safeguards
Avonao ID (id.avonao.com), operated by Avonao, Inc.	Sole identity provider for sign-up and sign-in to the Service; the Service holds no sign-in methods of its own. Whatever sign-in methods you use at Avonao ID (including any third-party account you connect there), it, not the Service, receives and keeps them. It collects and keeps your email addresses, name, sign-in methods, security log, country and age confirmation	The data region of the member's Avonao ID account, with some records in its home region, US West. Avonao ID is only an identity provider: it holds no customer workspace data other than the connection to the Service and the subscription state (none, free or paid)	To the Service: your Avonao ID identifier, confirmed email address, name and language (and an earlier user id if your account was migrated). From the Service: whether your subscription is none, free or paid, its renewal date and a link to manage it; no prices or billing data	Same legal entity as the Service; every exchange between the two is signed and authenticated

Notice. At least 30 days before a new sub-processor starts processing personal data, we email the owners of every workspace and publish the change on this page with the new date at the top.
Objection. If you have reasonable data protection grounds, you may object within that period by writing to privacy@intramedial.com. We then try in good faith to avoid using the new sub-processor for your data. If we cannot, you may terminate the affected service before the change takes effect and we will refund the unused part of any prepaid fees for it.
Urgent replacement. If we must replace a provider immediately for security or continuity reasons, we do so with the same protections, and we notify workspace owners as soon as we can and give the same right to object.

Sub-processors

1. What this page is#

Agenten handeln, wenn die Ebene Ja sagt – und das Protokoll sagt, warum.

2. Current sub-processors#

2.1 Destinations and systems you choose#

2.2 Identity provider#

3. Changes to this list#

Hinweis zu Marken

Region

Sprache wählen

EU notices

Receipt practices

Program terms

Sub-processors

1. What this page is#

Agenten handeln, wenn die Ebene Ja sagt – und das Protokoll sagt, warum.

2. Current sub-processors#

2.1 Destinations and systems you choose#

2.2 Identity provider#

3. Changes to this list#

4. Related#

EU notices

Receipt practices

Program terms