Subprocessors
Last Updated: March 20, 2026
This document lists the subprocessors engaged by FR&D LLC in connection with the provision of the Arepo platform. This list is maintained pursuant to our Data Processing Agreement and is updated as subprocessor relationships change.
Data Processing: FR&D LLC acts as a data processor on behalf of its clients (data controllers). The subprocessors listed below may process personal data in the course of providing their services to FR&D LLC.
Current Subprocessors
1. Cloudflare, Inc.
- Purpose
- Core infrastructure provider: edge compute (Workers), relational database (D1), object storage (R2), key-value storage (KV), vector database (Vectorize), AI inference, CDN, DDoS protection, and DNS
- Data Processed
- All data processed by the Arepo platform, including: user messages, uploaded documents, conversation history, account metadata, authentication tokens, API requests/responses, and vector embeddings
- Location
- United States (San Francisco, CA). Data processed at global edge locations.
- Links
- DPA / Privacy Policy
2. Anthropic, PBC
- Purpose
- AI model provider (Claude models) for natural language processing, chat completions, and AI agent responses
- Data Processed
- User messages, conversation context, document excerpts used for RAG-enhanced responses. Anthropic's commercial API terms provide that input/output data is not used for model training.
- Location
- United States (San Francisco, CA)
- Links
- Commercial Terms / Privacy Policy
3. OpenAI, Inc.
- Purpose
- AI model provider (GPT models) for natural language processing, chat completions, and AI agent responses
- Data Processed
- User messages, conversation context, document excerpts used for RAG-enhanced responses. OpenAI's API terms provide that input/output data is not used for model training.
- Location
- United States (San Francisco, CA)
- Links
- DPA / Privacy Policy
4. Groq, Inc.
- Purpose
- AI inference provider for low-latency language model processing and chat completions
- Data Processed
- User messages, conversation context, document excerpts used for RAG-enhanced responses
- Location
- United States (Mountain View, CA)
- Links
- Terms of Use / Privacy Policy
5. Stripe, Inc.
- Purpose
- Payment processing, subscription management, and billing
- Data Processed
- Client billing information (name, email, payment method details). FR&D LLC does not store payment card data; only Stripe customer IDs and subscription metadata are retained.
- Location
- United States (San Francisco, CA)
- Links
- DPA / Privacy Policy
6. Twilio, Inc.
- Purpose
- SMS and voice communications for AI agent interactions via the SMS and voice bot channels
- Data Processed
- Phone numbers, SMS message content, voice call metadata, and call recordings (if enabled by client)
- Location
- United States (San Francisco, CA)
- Links
- DPA / Privacy Policy
7. Slack Technologies / Salesforce, Inc.
- Purpose
- Bot integration platform enabling AI agent deployment within Slack workspaces
- Data Processed
- Slack workspace metadata, channel information, user messages sent to/from the bot, bot installation credentials
- Location
- United States (San Francisco, CA)
- Links
- DPA / Privacy Policy
8. Discord, Inc.
- Purpose
- Bot integration platform enabling AI agent deployment within Discord servers
- Data Processed
- Discord server metadata, channel information, user messages sent to/from the bot, bot installation credentials
- Location
- United States (San Francisco, CA)
- Links
- Developer Terms / Privacy Policy
9. Telegram FZ-LLC
- Purpose
- Bot integration platform enabling AI agent deployment within Telegram chats
- Data Processed
- Telegram chat metadata, user messages sent to/from the bot, bot installation credentials, user profile information (username, user ID)
- Location
- United Arab Emirates (Dubai)
- Links
- Privacy Policy / Terms of Service
10. Meta Platforms, Inc.
- Purpose
- Bot integrations for WhatsApp Business, Facebook Messenger, and Instagram Direct messaging channels
- Data Processed
- User messages, phone numbers (WhatsApp), page metadata (Messenger), account information (Instagram), media attachments, and bot installation credentials
- Location
- United States (Menlo Park, CA)
- Links
- Platform Terms / Privacy Policy / WhatsApp Business Terms
11. Microsoft Corporation
- Purpose
- Bot integration platform enabling AI agent deployment within Microsoft Teams via Bot Framework
- Data Processed
- Teams tenant metadata, channel information, user messages sent to/from the bot, bot installation credentials
- Location
- United States (Redmond, WA)
- Links
- DPA / Privacy Statement
Subprocessor Change Notification
Notification Process
FR&D LLC will notify clients of any changes to this subprocessor list at least thirty (30) days before engaging a new subprocessor or materially changing the role of an existing subprocessor. Notification will be provided via:
- Email notification to the account owner email address on file; and
- Update to this subprocessor list with a revised effective date.
Right to Object
Clients may object to the engagement of a new subprocessor within fifteen (15) days of receiving notification. Objections must be submitted in writing to [email protected] and must include specific, reasonable grounds related to data protection concerns.
Upon receiving a valid objection, FR&D LLC will:
- Make commercially reasonable efforts to provide the Service without using the objected-to subprocessor; or
- Propose an alternative subprocessor or mitigation measures; or
- If neither (1) nor (2) is feasible, either party may terminate the affected portion of the Service upon thirty (30) days' written notice, and FR&D LLC will refund any prepaid fees for the terminated portion of the Service covering the period after termination.
Record of Changes
| Date | Change | Subprocessor |
|---|---|---|
| March 20, 2026 | Initial publication | All listed subprocessors |
This subprocessor list is maintained by FR&D LLC and is subject to update. For questions, contact [email protected].