Sub-processors

Last Updated: January 18, 2026

Costbase uses the following third-party service providers (sub-processors) to help deliver our services. Each sub-processor is bound by data protection obligations consistent with our Data Processing Agreement.

Current Sub-processors

Amazon Web Services (AWS)

Cloud infrastructure, database hosting, caching (Redis)

Location: United States (us-east-1)

Data: All service data including request logs, account data, and cached content

Vercel

Marketing website and console hosting

Location: United States

Data: Website analytics, session data

Polar.sh

Payment processing and subscription management

Location: United States

Data: Billing information, subscription status (not payment card details)

Google Analytics

Website and console usage analytics

Location: United States

Data: Page views, session duration, device info (anonymized IP)

LLM Providers (via your keys)

AI model inference (OpenAI, Anthropic, Google, Mistral, etc.)

Location: United States / Global

Data: Prompts and responses routed through Costbase using your API keys

Important Notes

LLM Providers

When you route requests through Costbase, your prompts are sent to the LLM provider you configure using your own API keys. These providers process data according to their own privacy policies. Costbase acts as a routing layer and does not have a direct data processing agreement with these providers on your behalf—your relationship is directly with them.

Change Notifications

We will notify you of any intended changes to our sub-processors at least 30 days in advance, giving you the opportunity to object. Material changes will be communicated via email to your registered account email address.

Data Transfers

All sub-processors are located in the United States. For transfers of personal data from the European Economic Area (EEA), United Kingdom, or Switzerland, we rely on Standard Contractual Clauses (SCCs) as approved by the European Commission. Details are available in our Data Processing Agreement.

Questions?

If you have questions about our sub-processors or need additional information for your compliance requirements:

Email: contact@costbase.ai

Related Policies

Data Processing Agreement Privacy Policy Security

Costbase Sub-processor List
Version 1.0 | January 2026