Trust & Security

Subprocessors

Third-party subprocessors we engage to process customer data in connection with the delivery of our services.

Subprocessor Guidelines

Ariso carefully selects subprocessors that meet our high standards for security, privacy, and data protection. Before engaging any subprocessor, we:

  • Conduct thorough security and privacy assessments before engaging any subprocessor
  • Execute Data Processing Agreements (DPAs) with equivalent security and retention obligations
  • Apply Standard Contractual Clauses (SCCs) for cross-border data transfers where required
  • Ensure compliance with applicable data protection regulations (GDPR, CCPA, etc.)
  • Monitor subprocessor compliance on an ongoing basis

We limit the data shared with each subprocessor to only what is necessary for them to perform their specific function. Customers will be notified of any new subprocessors before they begin processing data, with the opportunity to object.

Current Subprocessors

AWS

Infrastructure (compute, storage, database)

All platform data
OpenAI

LLM inference

Prompts with user context
Anthropic

LLM inference

Prompts with user context
AssemblyAI

Speech-to-text transcription and audio intelligence services

Audio recordings and associated transcription data
Google Cloud

Infrastructure, LLM inference

Prompts with user context
Google Workspace

Calendar API, Gmail API, OAuth

Calendar/mail metadata, auth tokens
Microsoft 365

Teams API, Outlook/Graph API, OAuth

Message and file content, mail metadata, auth tokens
Microsoft Azure

Bot messaging relay, infrastructure

Teams message content, attachments, user IDs
Slack

Messaging platform

User messages, workspace data
Linq

Messaging platform

User messages, phone numbers
Zoom

Meeting platform

Meeting metadata
Recall.ai

Meeting transcription

Meeting recordings, transcripts
ScraperAPI

Web data retrieval via managed proxy infrastructure

Requested URLs and retrieved public web page content
SigNoz

Observability

Logs, traces, metrics
Langfuse

LLM tracing

Agent execution data
Sentry

Application monitoring and error tracking

Application errors, performance telemetry, technical diagnostics, IP addresses, and metadata included in error reports
Hotjar

Website analytics, heatmaps, and session recordings

Usage analytics, session recordings, clicks, scrolls, device/browser information, and masked user interactions
Mailgun

Email delivery

Email addresses, magic links

Last updated: September 2026