Authorized Sub-processors
Current sub-processor list.
Customer authorizes CloudRaker to appoint the sub-processors listed below. CloudRaker updates this list from time to time and makes the current list available at cloudraker.com/legal/subprocessors.
CloudRaker engages the following third parties to process Customer Personal Information:
| Entity name | Product or service | Location of processing | Purpose of processing |
|---|---|---|---|
| Google Cloud Platform (Google LLC) | Cloud Infrastructure | Canada (northamerica-northeast1/2) / USA / EU (per region selected in Order) | Hosting, compute, managed database, object storage, audit log storage |
| OVH SAS (OVHcloud) | Cloud Infrastructure (Canada) | Canada - Beauharnois, Quebec (BHS region) | Alternate Canadian-resident hosting and storage; default for Customers electing Quebec / Canada-only data residency |
| Cloudflare, Inc. | Edge Platform - Workers, R2, D1, AI | Processing at the data centre closest to the End User; storage regions selected by CloudRaker; logs stored in USA / Canada / EU | Edge compute, object storage, serverless SQL database, AI inference, CDN, DDoS protection, WAF, and bot management |
| WorkOS, Inc. | Identity Provider Bridge | USA | SSO (SAML 2.0, OIDC), SCIM 2.0 provisioning, directory sync |
| Anthropic, PBC | Foundation Model Inference | USA | Generative model inference for agent intents (Claude family models). No training on Customer data per Anthropic API terms. |
| OpenAI, L.L.C. | Foundation Model Inference | USA | Generative model inference for agent intents (GPT family models). No training on Customer data per OpenAI API terms. |
| Microsoft Azure | Azure OpenAI Services | Canada | Regionalized inference provider when Canada region is required. Generative model inference for agent intents; no training on Customer data per OpenAI API terms. |
| Google LLC (Gemini API) | Foundation Model Inference | Canada / USA / EU (per region) | Generative model inference for agent intents (Gemini family models). No training on Customer data per Gemini API terms. |
1 Customer data residency is selected in the applicable Order. Quebec / Canada-only residency uses OVHcloud in Beauharnois, Quebec and/or Google Cloud Platform in northamerica-northeast1. Broader Canadian, USA, or EU residency uses Google Cloud Platform in the corresponding region.
2 Cloudflare Workers, R2, D1, and Workers AI run on Cloudflare edge infrastructure. Storage regions for R2 and D1 are configured by CloudRaker to match the Order residency configuration.
3 Foundation model providers process inference inputs and outputs in their respective regions. CloudRaker selects providers and routes traffic in line with the Order residency configuration.
4 Customer-specific sub-processors required by a deployment, including a Customer-mandated foundation model provider, are added by amendment to the applicable schedule.