Sub-processor List

Last updated: September 2026 · Version 1.1

1. General Authorization

Under the DPA, the customer (Controller) provides a general authorization for EVE to engage sub-processors to support the Services. EVE imposes data-protection obligations on each sub-processor that are no less protective than those in the DPA, and remains responsible for each sub-processor's performance.

2. Infrastructure Sub-processors

The following named providers operate the core hosting and edge infrastructure of the Services:

3. Functional Sub-processors

EVE also engages the following named providers for specific functions. Some operate only where the relevant feature is enabled.

4. Large Language Model Providers

EVE's governance evaluation is deterministic and does not transmit customer request content to a third-party LLM provider. Where a customer elects to enable an LLM-backed feature — by choosing to route requests to a provider or by supplying its own provider keys — the selected provider acts as a sub-processor only for that routing, on the customer's instruction. EVE-operated interactive surfaces, including the public demonstrations on this website, run on EVE-operated inference infrastructure in the United States and do not transmit input to a third-party LLM provider; if that changes, the provider will be named in this list before the change takes effect. Self-hosted and on-premise deployments can operate with no third-party LLM sub-processor.

5. International Transfers

The Services are primarily hosted in the United States. Where applicable, EVE and its infrastructure sub-processors rely on appropriate transfer mechanisms, including the European Commission's Standard Contractual Clauses (and the UK Addendum where relevant), as described in Section 12 of the DPA.

6. Notification & Objection

EVE will notify customers who have executed a DPA at least 30 days in advance of any intended addition or replacement of a sub-processor. A customer may object on reasonable data-protection grounds by written notice within 15 days of receiving that notice; if the objection cannot be resolved in good faith, the customer may terminate the affected part of the Services. To request the current named list, to subscribe to change notifications, or to raise an objection, contact [email protected].

7. Contact

For data-protection matters, contact EVE NeuroSystems LLC at [email protected] or [email protected]. See also the DPA, Privacy Policy, and Legal Center.

Data subjects and supervisory authorities in the EEA and the United Kingdom may also contact our Article 27 representatives, listed in Section 7C of the Privacy Policy and Section 12A of the DPA.