Last reviewed: 20 May 2026
A sub-processor is any third-party service that may process data on our behalf in connection with the operation of abatron.ai. The categories below describe the types of services we rely on for this website, their hosting region, and the data they may see.
Detailed vendor-level information (specific providers, exact regions, certifications, contract status) is held in confidence as an operational matter. It is disclosed to regulatory and supervisory authorities upon lawful request, and to contracted clients through the audit procedures defined in their Data Processing Agreement. It is not published or shared publicly.
Sub-processors used by individual platform deployments (for example, by a civic-tech operator running Abatron technology for municipal clients) are listed in the Data Processing Agreement signed between that operating entity and its end-clients. Those sub-processors are not part of this list and do not handle inquiry data sent through this website.
All sub-processors that handle personal data are bound by GDPR-aligned Data Processing Agreements. Where transfer outside the European Union is necessary (for example, source code hosting), it is performed under recognised legal transfer mechanisms (Standard Contractual Clauses, EU-US Data Privacy Framework, or equivalent), and the data transferred is non-personal in nature.
Specific certifications (SOC 2, ISO 27001, EU-US DPF status, region-specific addenda) are disclosed in the NDA-protected complete list.
When we add, change, or remove a sub-processor that handles information submitted to this website, this page is updated within thirty (30) days of the change taking effect. Material changes are flagged at the top of this page for an additional thirty (30) days. Clients under DPA receive the equivalent notice in the form specified by their agreement.
Regulatory and supervisory authorities (data protection commissioners, law enforcement acting under valid legal process, court orders) receive vendor-level detail upon lawful request, within the timeframe specified by applicable law.
Contracted clients access vendor-level detail through the audit procedures defined in their executed Data Processing Agreement, on a structured basis with mutual confidentiality obligations.
Requests outside these two channels (general inquiries, prospective due diligence questionnaires, market research, comparative analyses) receive a description of our compliance posture but not vendor-level detail.
Authority requests or audit coordination under an existing Data Processing Agreement: contact@abatron.ai.
Abatron LLC, Delaware, United States.