Sub-processors
Last updated 2026-08-01
Infrastructure and operations
| Sub-processor | Purpose and data | Scope |
|---|---|---|
| Amazon Web ServicesAWS US East (N. Virginia), us-east-1 | Compute, the control-plane database, backups, operational logs and KMS-held signing keys.Everything Finest stores: workspaces, routes, evidence records, receipts and the cost ledger. | Both doors |
| StripeUnited States | Card payments for prepaid credit, and payment method storage.Billing contact and payment instrument. Stripe holds card data; Finest never sees a card number. | Both doors |
| ResendUnited States | Transactional email: sign-in links and workspace notifications.Recipient email address and the message body, which never contains prompt or completion content. | Both doors |
| SentryUnited States | Error tracking.Exception type, message, stack frames and an allowlist of request headers. Request bodies, local variables and breadcrumbs are excluded by construction, not by redaction. | Both doors |
| PostHogUnited States | Product and web analytics, proxied through this domain.Website: page paths, scroll depth, section reach, web vitals and a rotating server-derived pseudonymous identifier. Console: a screen name from a closed published list, never a URL and never an identifier; which state a screen rendered; whether a step succeeded; and amounts only as coarse buckets, never a figure. Workspaces are counted under a per-workspace HMAC that is unrelated to every other identifier we hold. One first-party cookie on the website and only with consent, none before it and none if declined; no query strings, no session replay, no form contents, and nothing derived from a prompt or a completion. | Website and console |
Model providers
Model providers are not Finest’s sub-processors in the usual sense, and it would be misleading to list them as though they were. Which providers see your traffic is a decision you make, and it works differently per door.
On Door 1, requests reach providers through us, on our credentials. Two gates stand in front of that. A provider must carry a commercial-terms clearance set by a human, which defaults to off for every provider. And a route cannot move to a provider you have not admitted. Every serve records which endpoint answered it, so your receipts are the authoritative list for your workspace and they are exportable.
The table below is the full closed set of providers this system can address, with the primary processing region each one publishes. Several are outside the United States, including in the People’s Republic of China. Whether your data may lawfully go to a given region is your assessment, and the provider’s own documentation governs rather than this summary.
| Provider | Stated primary processing region |
|---|---|
| OpenAIopenai | United States |
| Anthropicanthropic | United States |
| Google (Gemini API)google | United States and other Google regions |
| xAIxai | United States |
| DeepSeekdeepseek | People's Republic of China |
| Moonshot AI (Kimi)moonshot | People's Republic of China |
| Z.ai (GLM)zai | People's Republic of China |
| Alibaba Cloud Model Studio (Qwen)alibaba | People's Republic of China, and Singapore endpoints |
| MiniMaxminimax | People's Republic of China, and Singapore endpoints |
| Mistral AImistral | European Union (France) |
| Groqgroq | United States |
| Together AItogether | United States |
| Fireworks AIfireworks | United States |
| DeepInfradeepinfra | United States |
Notice of change
New sub-processors are added to this page before they are switched on, and the change is recorded in the changelog. If you need advance notice as a contractual term rather than a practice, clause 7 of the data processing addendum gives you 30 days’ notice of an addition that would process customer content, and a right to object.
This page is operated by PM Frontier LLC, a Wyoming limited liability company. Legal notices take effect when delivered in writing to:
PM Frontier LLC30 N Gould StSheridan, WY 82801United StatesEmail to [email protected] reaches us faster and is sufficient for everything except a formal notice under the terms. Other routes are on the contact page.