Sub-processors
Draft, under legal review
Last updated 28 October 2026
These are the providers that receive personal data from Kiln. The table gives what each is used for and where it processes the data.
| Provider | Purpose | Region |
|---|---|---|
| Amazon Web Services (AWS) | Hosting, encrypted backups and Amazon Bedrock model inference | United Kingdom (eu-west-2, London). Inference may use United States regions only where the residency setting allows it. |
| Vercel | Platform hosting | EU |
| Supabase | Platform database and sign-in | EU, with sign-in edges in the United States |
| Axiom | Platform logs | Not confirmed |
| Stripe | Payments, only if payments are enabled | United States and Stripe’s global infrastructure |
| Mistral AI | AI model provider | EU |
| OpenAI | AI model provider | United States |
| Anthropic | AI model provider | United States |
| AI model provider | United States | |
| GitHub | Code export, only when you export an app’s code | United States |
| Expo / EAS | Phone app builds | United States |
Model providers and where traffic goes
Model requests use Amazon Bedrock in London (eu-west-2) where that route is enabled, Mistral AI in the EU, and OpenAI, Anthropic or Google in the United States. A request can reach a United States region only where the residency setting allows it.
Changes to this list
Hellmai updates this page when a provider is added or changed. There is no notice period for changes yet.