Subprocessors

A "subprocessor" is a third party that processes Customer Content on System2's behalf to help us operate the Service. Hosting providers, error trackers, our LLM provider — all subprocessors. We use the minimum number needed.

Disclosure of subprocessors and prior notice of changes is required by Article 28(2) of the GDPR and by analogous provisions in our Data Processing Addendum.

When you connect a third-party service to System2 (e.g. Linear, Notion, Slack, Gmail, HubSpot), that provider becomes a recipient of the data you direct System2 to send it.

These providers are not subprocessors— they are independent controllers governed by their own terms and privacy policies. You are responsible for reviewing each provider's terms before connecting and for the data you choose to share with them through the Service.

Because Anthropic processes the largest portion of Customer Content (every chat goes through them), the specifics matter. Per our agreement with Anthropic and their published commercial terms:

• Customer Content sent to Claude is not used to train Anthropic's models.
• Anthropic retains API inputs and outputs for up to 30 days by default. Where a request is flagged for trust- and-safety review, Anthropic may extend retention up to 2 years for inputs/outputs and up to 7 years for the related trust-and-safety classifications. See Anthropic's data-retention documentation for current details.
• Anthropic operates from the United States; data may transit other regions Anthropic uses for inference capacity.
• Reference: Anthropic Commercial Terms.

Before engaging a new subprocessor that will process Customer Content, we:

1. Review their security posture and data practices.
2. Sign a data-processing agreement that imposes the same or stronger obligations than our DPA with you.
3. Update this page at least 30 days before the new subprocessor begins processing Customer Content.
4. Notify subscribed customers (see the next section).

We notify customers of new subprocessors:

• By email to account admins at least 30 days before the new subprocessor begins processing Customer Content.
• By updating this page on the same day the email goes out.
• In our changelog (in-product release notes) for visibility.

To subscribe to subprocessor change notifications, email privacy@autono.sh with the subject line "Subprocessor notifications" and the email address(es) you want notified. We will add you to the announcement list.

If you reasonably object to a new subprocessor on data-protection grounds, contact us within the 30-day notice period at privacy@autono.sh. We will work with you in good faith to find an alternative. If we can't, you may terminate the affected portion of the Service for cause without penalty.