AirPulse stores and processes customer personal data primarily on servers in India. Where a sub-processor below runs outside India, the transfer is covered by contractual safeguards, and by Standard Contractual Clauses where the GDPR applies.
Infrastructure
| Sub-processor | Location | Purpose |
|---|
| Amazon Web Services (AWS) | India (Mumbai, ap-south-1) | API servers, Postgres database, S3, SES email, CloudWatch logs, CloudFront |
|---|
| Cloudflare, Inc. | United States (global CDN) | Proxy in front of airpulse.ai and prod-api.airpulse.ai |
|---|
Sign-in and billing
| Sub-processor | Location | Purpose |
|---|
| Clerk, Inc. | United States | Sign-in, organisations, plan billing |
|---|
AI answer engines
| Sub-processor | Location | Purpose |
|---|
| OpenAI | United States | AI answer engines: querying, chat, analysis |
|---|
| Anthropic | United States | AI answer engines: querying, chat, analysis |
|---|
| Google (Gemini) | United States | AI answer engines: querying, chat, analysis |
|---|
| Perplexity AI | United States | AI answer engines: querying, chat, analysis |
|---|
Search and data
| Sub-processor | Location | Purpose |
|---|
| Bright Data Ltd. | United States | Capturing answers from ChatGPT, Perplexity, Gemini, Copilot and Grok; Reddit data |
|---|
| Google (Search Console API) | United States | Search Console data the customer authorises |
|---|
| SerpAPI | United States | Search results, keyword discovery |
|---|
| DataForSEO | United States | Search results, keyword discovery |
|---|
| Oat (oat.fm), a product by Airmeet AI Labs | United States | Social monitoring API |
|---|
Monitoring and operations
| Sub-processor | Location | Purpose |
|---|
| PostHog | United States | Analytics and backend logs, error monitoring |
|---|
| Sentry | United States | Analytics and backend logs, error monitoring |
|---|
| Slack | United States | Internal alerts and digests |
|---|
| logo.dev | United States | Favicons |
|---|
Optional enrichment
| Sub-processor | Location | Purpose |
|---|
| Firecrawl | United States | Scraping; runs only when a setting turns it on |
|---|
| Parallel.ai | United States | Scraping; runs only when a setting turns it on |
|---|
Agent tooling
| Sub-processor | Location | Purpose |
|---|
| nekuda (AgentLane, WebMCP SDK) | United States | Registers the airpulse.ai WebMCP tools for in-browser AI agents and records their use; turns WebMCP on in Chrome through an origin trial |
|---|
Changes to this list
We give customers at least 30 days' written notice before engaging a new sub-processor or replacing one. A customer may object on data-protection grounds within that window. If an urgent replacement is needed for security or service continuity, we notify customers as soon as we reasonably can.
- 5 November 2026. List published with the DPA v1. Added nekuda (AgentLane, WebMCP SDK) for the site's in-browser agent tools.
