Subprocessor List
Representative list of third-party subprocessors and service categories used to run Agent Smith (hosting, auth, AI, email, payments, monitoring).
Legal Notices — all published notices in one place.
Effective date: 2026-08-16 · Last updated: 2026-08-16
Agent Smith uses subprocessors to operate the Service. This list reflects core integrations and typical production configuration. Items marked optional may depend on environment flags.
| Subprocessor | Purpose | Data categories | Status |
|---|---|---|---|
| Supabase | Auth, database, storage, edge functions | accounts, workspaces, content, logs | Active (core) |
| Vercel | Application hosting, CDN, edge routing | request metadata, deployment logs | Active (core) |
| Stripe | Payments, subscriptions | billing identifiers, payment metadata | Active |
| Resend | Transactional email (invites, notices) | email addresses, email content | Active / optional (env) |
| Sentry | Error monitoring | diagnostics, device/app events | Optional |
| OpenAI | AI inference | prompts, AI outputs, attachments (feature-dependent) | Active |
| Anthropic | AI inference | prompts, AI outputs | Active |
| Google (Gemini) | AI inference | prompts, AI outputs | Active |
| xAI (Grok) | AI inference | prompts, AI outputs | Active |
| OpenRouter | Primary AI model routing and aggregation across inference endpoints | prompts, AI outputs | Active (primary text route) |
| NVIDIA | Nemotron model inference and Free-route model improvement | prompts, AI outputs | Active (Nemotron model; Free route has separate data terms) |
| DeepSeek | DeepSeek model inference through OpenRouter endpoints | prompts, AI outputs | Active (model-dependent) |
| Browserbase | Managed cloud browser runtime for agent browser-automation actions | stored-login session credentials (encrypted), browsed page content, screenshots | Optional (env-gated; active only when the browser runtime is provisioned) |
| Captcha (hCaptcha / Turnstile) | Abuse prevention | IP risk signals, captcha tokens | Optional (env) |
| Connected integrations | User-enabled integrations | OAuth tokens, external content | User-enabled |
International transfers: Switzerland is recognized for adequacy in many EU contexts; transfers elsewhere rely on appropriate safeguards where required.