Altisium 360 FZ-LLC ("Altisium", "Provider") engages the third-party sub-processors listed below to help provide the Altisium Service. This list is incorporated by reference into the Data Processing Agreement (DPA) between Altisium and each customer.
The Service is hosted in the European Union (Frankfurt). Encrypted backups are stored with Wasabi in the region aligned to the customer's selected data-residency location: United Kingdom, European Union, Asia-Pacific or Middle East. Backup data does not leave the customer's chosen region. Legal-entity details for each sub-processor are available to customers on request.
How to receive notifications of changes
Altisium gives customers at least 30 days' written notice before adding or replacing a sub-processor, except where an emergency engagement is needed to address a security or business-continuity issue (in which case notice is given as soon as reasonably practicable). Customers may subscribe to change notifications, and may object to a change, in accordance with the DPA. To subscribe, email privacy@altisium.com.
Sub-processors
Infrastructure & hosting
| Sub-processor | Service provided | Location | Categories of data |
|---|
| Render | Application hosting, compute, managed Postgres | European Union (Frankfurt) | All categories of customer data hosted by the Service |
| Wasabi | Encrypted off-site database backup storage | UK / EU / APAC / Middle East, aligned to the customer's data-residency region | Encrypted backups of customer data |
Error monitoring & observability
| Sub-processor | Service provided | Location | Categories of data |
|---|
| Sentry | Application error and performance monitoring | United States | Technical metadata; limited content in error payloads (Altisium scrubs payloads to minimise personal data) |
Communications
| Sub-processor | Service provided | Location | Categories of data |
|---|
| MailerSend | Transactional and notification email delivery | European Union | Recipient name and email address; message content of platform notifications |
AI / machine learning
| Sub-processor | Service provided | Location | Categories of data |
|---|
| OpenAI | LLM-based summarisation and classification powering in-product AI features | United States | Assessment and questionnaire content submitted for AI processing, and any personal data incidentally contained in it. Customer data is not used to train AI models; the enterprise API tier is used. Authentication data is never sent. |
Billing & payments
| Sub-processor | Service provided | Location | Categories of data |
|---|
| Stripe | Payment processing and subscription billing | European Union (Ireland); United States | Billing contact name, email and address; payment-method metadata (Stripe itself holds card data) |
Change log
| Date | Change |
|---|
| 2026-07-14 | Corrected hosting region to EU (Frankfurt); added Wasabi multi-region residency (UK / EU / APAC / Middle East); added MailerSend (email delivery). |
| 2026-06-28 | Initial publication. |
This list reflects the sub-processors engaged as of the date above and is updated as our stack evolves.
