08Trust & legal

Subprocessors

Last updated: 2026-04-25 · Pre-launch — pilot scope

Working list. This list reflects subprocessors used in pilot engagements. Subprocessors used at GA may differ; we update this page and notify customer admins of changes that affect customer data at least 30 days before they take effect. Questions: privacy@jubilabs.ai.

What is a subprocessor

A subprocessor is a third-party service that processes customer data on Jubi's behalf to deliver the platform.

Current list

SubprocessorRoleRegion
AnthropicLLM inference (default). Prompts and responses processed for inference only; no training, no retention beyond inference.United States
OpenAILLM inference (alternate). Same posture: enterprise endpoints, no training.United States
CloudflareCDN and DDoS mitigation for the marketing site. Sees visitor IPs and request metadata.Multi-region
Google FontsFont delivery for the marketing site. Browser requests may expose visitor IP address and user-agent metadata to Google.Global
Managed hosting providerInfrastructure for managed pilot deployments, when Jubi operates the environment on the customer's behalf.Engagement-specific

We do not currently use third-party advertising trackers, analytics platforms, or session-replay tools on jubilabs.ai.

Customer-deployed components

Your own Metabase instance, data warehouse, and IdP are not subprocessors of Jubi — they are the customer's own systems. Jubi reaches them on the user's behalf and under the user's permissions.

Hosting (managed deployment)

The default managed deployment runs on a single hyperscaler region chosen at engagement start. The hosting provider and region are documented in the engagement-specific addendum or executed DPA.

Notification of changes

Material changes are posted here and emailed to customer admins at least 30 days before they take effect, allowing the customer to object before the change applies to their data.

Privacy: privacy@jubilabs.ai