Engaged for all customers
Sub-processorProcessing performedPersonal data accessibleLocation
Render Services, Inc.ISO 27001, SOC 2 Type II, EU-US Data Privacy Framework
Runs the application and the database
Everything in transit, and at rest the scene record, accounts, and connected credentials as ciphertext
Frankfurt, Germany
Cloudflare, Inc.SOC 2 Type II, ISO 27001, ISO 27701, PCI DSS
Object storage for files a scene writes out, and video streaming for a scene that uses it
Files and media uploaded or published by Customer or its agents
European Union
Upstash, Inc.SOC 2 (Pro and Enterprise plans)
Cache and queues
Short-lived job state, sign-in state, and audio while it uploads
Frankfurt, Germany
Resend, Inc.SOC 2 Type II
Transactional email
Recipient address and message body
Ireland. The contracting entity is established in the United States
Engaged only where the relevant feature is used
Engaged only where the relevant feature is used. A workspace that does not use the feature is not processed by the sub-processor listed against it.
Sub-processorProcessing performedPersonal data accessibleLocation
Apple Inc.Only when a member of the workspace uses the app.
Push notifications to the app
The notification's title and body, which carry the message being announced
United States
LiveKit, Inc.SOC 2 Type II, EU-US Data Privacy FrameworkOnly when a scene uses live video.
Live video
The stream itself
United States and European Union
Model providers selected by CustomerOnly when the workspace uses Blackbelt Labs' model credentials rather than its own.
Answering prompts
The content of the prompts submitted by Customer's workspace
Per provider, listed at daslab.run/models
Where Daslab is operated on Customer-controlled servers, no sub-processor in this list is engaged. The equivalent parties are those Customer selects: its host, its storage provider and its model providers.