This register describes Individu’s configured production services as of October 1, 2026. A provider receives only the data needed for the feature in use. It does not receive every account’s full content for every request. The list distinguishes our service providers from services you choose to connect.

## 1. Hosting, storage and delivery

- **Vercel, Inc.** hosts the web application, agent runtime, AI Gateway, file storage and sandbox execution. It processes account identifiers, requests, content, files and operational logs as needed. Vercel Web Analytics and Speed Insights receive website usage and performance signals. Query strings and private media identifiers are stripped from our telemetry. Current web functions run in Washington, D.C. (iad1). Blob storage and Vercel’s delivery network are not covered by an EU-only commitment. [Vercel DPA](https://vercel.com/legal/dpa) and [Vercel sub-processors](https://vercel.com/legal/sub-processors).
- **PlanetScale, Inc.** provides PostgreSQL storage for accounts, sessions, conversations, notes, tasks, integration state and encrypted integration credentials. Our production database runs in US East (us-east-1). [PlanetScale privacy policy](https://planetscale.com/legal/privacy).
- **Upstash, Inc.** provides Redis for real-time delivery, short-lived caller authorization and cached agent memory context. It may process account identifiers, events and cached context. An EU-only region has not been verified for this deployment. [Upstash trust center](https://upstash.com/trust).
- **Resend, Inc.** delivers authentication codes, transactional emails and notifications. It processes recipient addresses and the email content being delivered. [Resend privacy policy](https://resend.com/legal/privacy-policy).

## 2. AI processing through Vercel AI Gateway

The configured model routes use **OpenAI**, **Google Vertex AI** and **TypeSafe AI**, with **Microsoft Azure** available as an OpenAI deployment fallback. Vercel AI Gateway routes the relevant request to the selected provider. A route may change when model availability or the task changes. This is not a promise that processing takes place in the EU.

- **OpenAI** processes relevant messages and context for language generation, image generation, speech transcription and embeddings.
- **Google Vertex AI** processes relevant video, media and context for video understanding.
- **TypeSafe AI** processes context for structured routing and decisions.
- **Microsoft Azure** may process relevant requests if a configured OpenAI route uses the Azure fallback.

Our AI Gateway requests exclude providers that train on those requests. Language, structured decision and video requests also require zero data retention support. Image generation, transcription and embeddings use the no-training requirement, but are not covered by our zero data retention guarantee. These controls apply to Individu’s AI requests, not to a separate AI app you authorize through MCP. [Vercel AI Gateway data policies](https://vercel.com/docs/ai-gateway/provider-options).

## 3. Search, extraction and browser tasks

These providers are configured in production and are used only when the corresponding feature runs. Queries can contain context supplied to the assistant. Avoid putting confidential client information into a public-web search request.

- **Parallel** provides primary web search and receives the search query. [Parallel privacy policy](https://parallel.ai/privacy-policy).
- **Brave Software** provides image search and a web search fallback, receiving the query. [Brave Search API privacy](https://brave.com/search/api/).
- **Exa** provides a web search fallback and receives the search query. [Exa privacy policy](https://exa.ai/privacy-policy).
- **Firecrawl** extracts content from requested web pages and receives the target URL and extraction request. [Firecrawl privacy policy](https://www.firecrawl.dev/privacy-policy).
- **Steel** provides cloud browsers for browsing tasks and private-login features. It may process visited pages, task content, browser sessions and credentials you choose to save or use in those tasks. [Steel privacy policy](https://steel.dev/privacy).

Processing regions for these services have not been independently verified as EU-only. Their own infrastructure providers may act as further processors under their terms.

## 4. Billing, Apple services and connected apps

**Polar** acts as merchant of record for web subscriptions, processing customer email, subscription and transaction details under its applicable payment and tax obligations. Polar does not receive your conversation history for checkout. [Polar privacy policy](https://polar.sh/legal/privacy-policy).

**Apple** provides Sign in with Apple, push notifications and relevant purchase services or external purchase reporting. It may receive account identifiers, device push tokens, notification payloads and required transaction attribution. **Google** provides Sign in with Google when selected. These services have their own applicable privacy terms.

**Google Workspace (Gmail and Google Calendar), WhatsApp/Meta, Monday.com, Granola and other apps you connect** are services chosen by you. Their access depends on the connection and your requested actions. WhatsApp uses a linked-device connection, rather than Meta’s official WhatsApp Business API. Their own privacy policies and your agreements with them apply.

**External AI apps connected through Individu MCP**, such as Claude, receive saved Individu content only after you authorize read access. They process retrieved information under their own terms. Removing access blocks future reads, but cannot recall copies already retrieved.

Better Auth and Baileys are libraries running within our application. Using them does not, by itself, send your content to a separately hosted Better Auth or Baileys service.

## 5. Changes and business agreements

The current register is linked from our [privacy policy](/privacy) and [DPA documentation](/dpa). For a business agreement, the signed DPA and its processor schedule govern authorization, change notices and any agreed transfer safeguards. Contact [legal@individu.ai](mailto:legal@individu.ai) for the contractual schedule and provider documentation. This register reports the deployed configuration and does not assert that every vendor contract or transfer assessment has been independently audited.