Ida uses a small number of suppliers to provide the Service. Where a supplier processes Customer Personal Data on our behalf, we require it to protect that data in accordance with applicable data-protection law and our Data Processing Agreement.
We give customers at least 30 days' notice before adding or replacing a sub-processor, by emailing the account owner and updating this page. Customers may object to a change on reasonable data-protection grounds.
Last updated: 10 September 2026
| Sub-processor | Purpose | Primary processing location |
|---|---|---|
| Supabase, Inc. | Database, authentication and file storage | European Union |
| Render Services, Inc. | Hosting for Ida's API and background processing | Frankfurt, Germany |
| Vercel Inc. | Hosting for Ida's web application and frontend functions | Frankfurt, Germany |
| OpenAI OpCo, LLC | AI model inference | United States |
| Anthropic, PBC | AI model inference | United States |
| Image generation and editing | United States | |
| Plus Five Five, Inc. (Resend) | Transactional email, including invitations and notifications | United States |
| AlphaAI Technologies Inc. (Tavily) | Web search and page extraction, when enabled | United States |
| Companies House (an executive agency of the UK Department for Business and Trade) | Look-ups of the public UK company register, when enabled. Only company names, company numbers and officer identifiers from that register are sent; everything returned is public record | United Kingdom |
| Functional Software, Inc. (Sentry) | Error and crash reporting, to detect and diagnose faults in the Service | European Union |
| PostHog, Inc. | Product analytics, to understand how the Service is used | European Union |
| Better Stack | Application log storage and search | European Union |
| Raintank, Inc. (Grafana Labs) | Operational metrics, alerting, and reporting on what the Service costs to run | United Kingdom |
Sentry, PostHog, Better Stack and Grafana support the running and improvement of the Service rather than its features. They receive technical and identifier data only — account and organisation identifiers, the pages and requests involved, status codes, timings, and error diagnostics. Grafana additionally receives your organisation's name alongside counts of the work Ida performed for you and what that work cost us to run. None of them receives the content of your messages, your documents, or the information Ida records about your business.
Ida's primary application data is stored on EU-hosted infrastructure.
Some of the sub-processors above may process Customer Personal Data outside the United Kingdom or European Economic Area. Where this constitutes a restricted international transfer, Ida uses an appropriate transfer mechanism as required by applicable data-protection law, such as an adequacy arrangement, the European Commission's Standard Contractual Clauses, and the applicable UK Addendum or International Data Transfer Agreement.
Further information about the transfer arrangements applicable to a particular sub-processor is available on request at data@runida.com.
Services that you choose to connect to Ida are different from Ida's sub-processors.
For example, if you connect Google Workspace, Gmail, Microsoft 365, Xero, Stripe, Linear, GitHub, Notion or Mailchimp, Ida accesses those systems on your instructions and using your authorised account.
Companies House is listed above because Ida can read the public register with its own key on your behalf. If you add your own Companies House key instead, those reads use your key and your own relationship with Companies House, in the same way as the systems above.
Those providers are not engaged by Ida to process Customer Personal Data on Ida's behalf and are therefore not listed above as Ida sub-processors. Their processing is governed by your own relationship with the relevant provider.
If we notify you that we intend to add or replace a sub-processor, you may object within 30 days on reasonable grounds relating to data protection.
Email data@runida.com and we will work with you in good faith to address the objection. If it cannot reasonably be resolved, you may terminate the affected part of the Service without penalty in accordance with the Data Processing Agreement.
For questions about our sub-processors, international transfers or data-protection practices, contact data@runida.com.
See also our Data Processing Agreement and Privacy Notice.