Sub-processors
A sub-processor is a third party Kumkuat uses to provide the service and that may receive data from your workspace or about your users. This is the current list. Changes are recorded in the change log with the date they took effect, and reflected on this page before or at the time they take effect. If your agreement requires advance notice of sub-processor changes, your Kumkuat contact provides it.
All stored workspace data stays in Google Cloud in the United States. The other sub-processors receive only what the table says, over TLS, for the single purpose listed. None of the model providers train on content sent through their APIs, and Kumkuat trains no models of its own.
Current list
| Sub-processor | Purpose | What it receives |
|---|---|---|
| Google Cloud (Google LLC) | Hosting, database, file storage, secrets and logging for the platform, in us-central1 and US multi-region storage | Everything in the platform |
| Google Cloud Identity Platform (Firebase Authentication) | Sign-in | Email address and password hash; for single sign-on, the SAML assertion from your identity provider |
| Google Gemini (Google LLC) | Model inference | Prompts: the persona profile, retrieved excerpts and the text or question your user submitted. When Google Search grounding is on, search queries derived from the question |
| OpenAI | Model inference | Prompts, as above |
| Anthropic | Model inference | Prompts, as above |
| Sapling AI | Writing-quality checks in content writing | The draft text submitted for a quality check |
| Bright Data | Retrieval of public social-media content | Public profile handles and URLs to fetch only |
| Firecrawl | Retrieval of public web pages | URLs to fetch only |
| Twilio SendGrid | Email delivery: alert digests, scheduled reports and notifications | Recipient address and the message |
| Loops | Email delivery: workspace invitations | Recipient address and the invitation |
| Slack (only if your admin installs the Kumkuat Slack app) | Digest delivery and slash commands | Digest text and the messages you send the app |
Where a workspace has added its own provider key under Workspace settings → Models & provider keys, that provider's calls run on the workspace's own account and contract instead of Kumkuat's; see Models and providers.
Not sub-processors
- Your own systems. The SharePoint, OneDrive and Google Drive connectors read from libraries you choose, with scopes your administrators grant and can revoke. Kumkuat is the reader; those services are not processing data for Kumkuat.
- Public sources. LinkedIn, X, Truth Social, Bluesky, newsrooms and RSS feeds are read, not written to, and receive nothing from your workspace. See Data flow.
- Open-source components. Flask, SQLAlchemy, LiteLLM and the other libraries the platform is built from run inside Kumkuat's own infrastructure. A full dependency list is available on request.
Change log
| Date | Change |
|---|---|
| 5 October 2026 | Named the email providers (Twilio SendGrid, Loops) that were previously listed by category only. No change to what they receive |
| 2 October 2026 | Added Sapling AI, which checks writing quality in content writing |
| September 2026 | Removed Supabase. The production database moved to Google Cloud SQL in us-central1, inside Kumkuat's Google Cloud project |