Legal
Sub-processors
The third parties that process customer data on our behalf. We commit to a 30-day notice on changes that affect this list, with a contractual right to object built into every paid agreement.
Last updated 20 April 2026. Subscribe to change notices by emailing privacy@annualtabletop.com.
| Category | Provider | Purpose | Region | Touches customer data |
|---|---|---|---|---|
| Cloud hosting | Amazon Web Services (AWS) | Compute, storage, database, KMS, networking | US (us-east-1, us-west-2) | Yes |
| Foundation model — primary | Anthropic | Atlas facilitator runtime. Zero-retention DPA in force; not used for training. | US | Yes |
| Foundation model — fallback | OpenAI | Atlas facilitator fallback. Zero-retention DPA in force; not used for training. | US | Yes |
| Transactional email | Resend | Account, magic-link, AAR delivery, and exercise-invite email. Transactional only — no marketing blasts. | US | Yes |
| Error monitoring | Sentry | Application error and performance telemetry | US | No |
| Product analytics | Vercel Analytics + Statcounter | Page-level marketing analytics. PII-stripped at collection. | US / EU edge | No |
| Billing | Stripe | Subscription billing and invoicing | US | Yes |
Sub-processors that handle Atlas inferences are bound by a zero-retention data-processing addendum — they do not retain your exercise text and do not use it to train models. See the Security page for the full data-flow description.
Authentication and session management are handled inside the Annual Tabletop application using an open-source TypeScript auth library (BetterAuth). User records, sessions, and credentials live in our own Postgres database under our primary hosting provider — no third-party identity sub-processor is used for self-serve tiers. Enterprise/FI tiers that require SAML 2.0 or OIDC SSO will add a dedicated identity partner (typically WorkOS) at the time of that deployment; we will update this page and notify customers in writing before any such sub-processor is added to an environment.