hiloop uses the third-party sub-processors below to provide, secure, and operate its services. We require each sub-processor to provide a level of data protection consistent with our commitments to customers.
Current sub-processors
| Sub-processor | Purpose | Data location |
|---|---|---|
| Amazon Web Services (AWS) | Cloud hosting, compute, storage | United States |
| Cloudflare | CDN, DNS, marketing site + asset hosting | Global edge |
| Datadog | Platform observability (operational telemetry, redacted at the collector) | United States |
| Google (Workspace) | Business email and productivity | United States |
| PostHog | Product analytics for the hiloop.ai website (pageviews, autocapture, session replay, heatmaps) | United States |
| WorkOS | Authentication / SSO | United States |
We do not currently use third-party model/LLM providers as sub-processors. If we introduce a model provider in the product, we will list it here in advance and, for enterprise customers on zero-data-retention or no-training terms, route its traffic to data-retention-eligible endpoints and pass those commitments through.
Changes
We will post additions or changes to this list here and, for customers under a Data Processing Addendum, provide at least 30 days’ notice before a new sub-processor begins processing customer personal data, along with a mechanism to object.
To be notified of changes, contact privacy@hiloop.ai.