Sub-processors
Last updated: October 1, 2026
Ragnerock, Inc. (“Ragnerock”) uses the third parties listed below to help provide the Service. Each of them may process Customer Personal Data on Ragnerock’s behalf, which makes it a Sub-processor under our Data Processing Addendum (the “DPA”). Capitalized terms not defined here have the meanings given in the DPA or the Terms of Service.
This list does not include providers of Customer-Provided Services. When you connect your own AI provider, database, or blob storage, or give a workspace its own web search key or sign in to an MCP connector, that provider works for you, not for Ragnerock, and is not a Sub-processor.
Connecting your own AI provider changes which provider runs agents and operators. It doesn’t change how uploaded PDFs are parsed; Mistral AI still extracts their text and images. Embeddings and image descriptions are still generated with Google’s Gemini API unless you also configure your own providers for them, and requests can reach the Gemini API if you turn on fallback to Ragnerock’s default provider.
AI Sub-processors
| Sub-processor | Purpose | Customer data processed | Location |
|---|---|---|---|
| Google LLC (Gemini API) | Default AI model for agents, operators, chat endpoints, embeddings, and image descriptions | Prompts and the documents, images, query results, and other Customer Data included in them; model outputs | United States and other locations where Google operates |
| Mistral AI SAS | Text and image extraction (OCR) from uploaded PDF documents | Uploaded PDF documents and the text and images extracted from them | European Union |
Infrastructure and service providers
| Sub-processor | Purpose | Customer data processed | Location |
|---|---|---|---|
| Google LLC (Google Cloud) | Cloud hosting: compute, databases, file storage, task queues, and logging | All Customer Data stored in or processed by the Service, including documents, annotations, chats, and account information | United States (Iowa) |
| Cloudflare, Inc. | Crawling websites you choose to ingest; DNS, proxy, and network services for Ragnerock’s app and API | Addresses and content of websites you ingest, and any site credentials you supply; traffic to Ragnerock’s app and API, including uploaded files | Global network |
| Raintank, Inc. (Grafana Labs) | Monitoring and observability | Service telemetry, which can include account identifiers, request URLs, and error messages | United States |
| GitHub, Inc. | Runs scheduled database backup jobs | Copies of the Service’s application database, which holds account and user information and may include other Customer Data | United States |
| ActiveCampaign, LLC (Postmark) | Transactional email | Names and email addresses of Users, and the sign-up codes, invitations, and account notices sent to them | United States |
| Stripe, Inc. | Payment processing and billing | Billing contact names and email addresses, payment details, and account identifiers | United States |
Changes to this list
We give at least thirty (30) days’ notice before a new Sub-processor begins processing Customer Personal Data. Notices go to everyone subscribed to updates for this page, and to the other recipients described in Section 4.3 of the DPA.
To subscribe, email legal@ragnerock.com with the subject “Subscribe to sub-processor updates.” To object to a new Sub-processor, write to the same address during the notice period and explain your grounds. Section 4.3 of the DPA describes what happens next.