Sub-processor List
Last updated: June 2026 · Version 1.0
Scope
This page lists the sub-processors that EVE NeuroSystems LLC ("EVE") engages to provide and support the EVE AI Core platform and related Services. It supplements Section 6 of the Data Processing Addendum (DPA). For customers who have executed a DPA, EVE provides prior notice of changes to this list as described below.
1. General Authorization
Under the DPA, the customer (Controller) provides a general authorization for EVE to engage sub-processors to support the Services. EVE imposes data-protection obligations on each sub-processor that are no less protective than those in the DPA, and remains responsible for each sub-processor's performance.
2. Infrastructure Sub-processors
The following named providers operate the core hosting and edge infrastructure of the Services:
| Sub-processor | Service provided | Region |
|---|---|---|
| Amazon Web Services, Inc. (AWS) | Cloud compute, storage, managed database, container, secrets, and network hosting of the Services | United States |
| Cloudflare, Inc. | Edge network, CDN, DNS, TLS termination, and DDoS protection for the public site and API | Global edge network (US-configured origin) |
3. Functional Categories
EVE may also engage sub-processors in the following categories. The named provider for each is available on request (see Section 6).
| Category | Purpose | Region |
|---|---|---|
| Managed data stores | Operational databases, caching, and audit-log persistence (where not provided directly by AWS) | United States |
| Transactional email / notifications | Account, security, and billing notifications | United States |
| Payment processing | Subscription billing and invoicing for paid plans | United States |
| Error monitoring / observability | Service reliability and incident response | United States |
4. Large Language Model Providers
EVE's governance evaluation is deterministic and does not, by default, transmit customer request content to a third-party LLM provider. Where a customer elects to enable an LLM-backed feature — by choosing to route requests to a provider or by supplying its own provider keys — the selected provider acts as a sub-processor only for that routing, on the customer's instruction. Self-hosted and on-premise deployments can operate with no third-party LLM sub-processor.
5. International Transfers
The Services are primarily hosted in the United States. Where applicable, EVE and its infrastructure sub-processors rely on appropriate transfer mechanisms, including the European Commission's Standard Contractual Clauses (and the UK Addendum where relevant), as described in Section 12 of the DPA.
6. Notification & Objection
EVE will give customers who have executed a DPA prior notice of any intended addition or replacement of a sub-processor (no less than 30 days where practicable), and an opportunity to object on reasonable data-protection grounds. To request the current named list, to subscribe to change notifications, or to raise an objection, contact contact@eveaicore.com.
7. Contact
For data-protection matters, contact EVE NeuroSystems LLC at contact@eveaicore.com or legal@eveaicore.com. See also the DPA, Privacy Policy, and Legal Center.
Stay notified
Customers under a DPA can subscribe to sub-processor change notifications by emailing contact@eveaicore.com with the subject "Sub-processor notifications."