Sub-Processors
Last Updated: July 2026
Introduction
AdPeak Ltd (“AdPeak”) uses third-party sub-processors to deliver and support its services. This page lists the current sub-processors that may process personal data on our behalf.
Customers will be notified at least 30 days before any new sub-processor is added, as set out in our Data Processing Addendum. Please refer to our Privacy Policy, Terms of Service, and Data Processing Addendum for full details on how we handle your data.
We select all sub-processors for their ability to provide an appropriate level of protection for personal data, and we enter into a written data processing agreement with each of them that imposes data-protection obligations no less protective than those in our own agreements with customers.
AI Model Providers
Our AI features (the AI assistant, agent reasoning, and natural-language analysis) are powered by large language model inference. We route inference to a primary provider and, when necessary for availability or capacity, to a fallback provider under strict controls.
| Provider | Role | Purpose | Data Processed | Location | Safeguards | Privacy / DPA Link |
|---|---|---|---|---|---|---|
| Google Cloud — Vertex AI | Primary | Powers the AI assistant, agent reasoning, and natural-language analysis | Conversation content, tool invocation parameters and results, and product/performance data included in a request | United Kingdom / European Union (Google Cloud) | Inference under the Google Cloud Data Processing Addendum and Service Specific Terms; under those terms, prompts and responses are not used to train Google’s or any third party’s foundation models | Google Cloud Privacy |
| OpenRouter | Fallback | Model routing when the primary provider is unavailable or at capacity | Same categories as above | Routed only to a fixed allow-list of vetted upstream providers located in the UK, EU, or US | Routing is pinned to a defined allow-list of vetted upstream providers, with no automatic fallback to others; we select those providers on a zero-data-retention basis (no storage of prompts/responses beyond the request), and under the applicable providers’ terms and our configured account settings they do not train on the data | OpenRouter Privacy |
How the fallback works. When our primary provider (Google Vertex AI) cannot serve a request, AdPeak may route that request through OpenRouter to an upstream model provider. Our OpenRouter configuration pins routing to a defined allow-list of vetted upstream providers and disables automatic fallback, so a request is served by one of those providers or it fails — it is never routed to an unlisted provider. Each provider on that allow-list is (a) located in the UK, EU, or US, and (b) selected on a zero-data-retention basis, meaning it does not retain prompts or responses beyond what is needed to return a result and does not use the data to train models. The current allow-list of upstream providers is available on request, and we will give at least 30 days’ notice before changing it (see our Data Processing Addendum).
Infrastructure and Service Providers
| Provider | Purpose | Data Processed | Privacy / DPA Link |
|---|---|---|---|
| Google Cloud Platform | Cloud hosting, compute, storage, BigQuery analytics | All platform data | Privacy · DPA |
| Firebase (Google) | Authentication, hosting | User authentication data, session data | Privacy |
| Stripe | Payment processing | Billing information, payment method data | Privacy · DPA |
| Slack (Salesforce) | Notification delivery | Notification content, channel identifiers | Privacy |
| Twilio | WhatsApp / messaging notification delivery | Notification content, recipient phone numbers/identifiers | Privacy · DPA |
All AdPeak platform data is hosted on Google Cloud Platform. Where any of the above services process personal data outside the UK/EEA, transfers are covered by the appropriate safeguards described in our Privacy Policy and Data Processing Addendum.
Sales and Marketing
| Provider | Purpose | Data Processed | Privacy / DPA Link |
|---|---|---|---|
| Attio | Customer relationship management, lead and free-report data, marketing communications | Name, business email address, connected Google Ads/Merchant Center account identifiers, advertising spend and performance summaries, communication and marketing-preference history | Privacy Policy |
Note: See our Privacy Policy for how lead and free-report data is processed.
Change Log
| Date | Change |
|---|---|
| July 2026 | AI inference moved to Google Vertex AI (primary) with OpenRouter as a zero-data-retention, UK/EU/US-only fallback. OpenAI and Anthropic removed as direct AI model sub-processors. Twilio added for WhatsApp / messaging notification delivery. Attio added as a Sales and Marketing (CRM) sub-processor for lead and free-report data. |
| April 2026 | Initial sub-processor list published. |
Contact
If you have questions about our sub-processors, please contact us at privacy@adpeak.ai.