Autm sub-processors

Effective date: 13th October 2026

Our current sub-processors

Microsoft Azure

What they do for Autm

Cloud infrastructure, hosting, storage, monitoring, and key and credential management

Data processed

Customer data and platform information needed to host and run the service

Where

United Kingdom

Microsoft Azure (Microsoft Foundry)

What they do for Autm

AI model inference, which lets Autm understand requests and generate responses

Data processed

Only the information needed for the task, which may include customer personal data. Where appropriate and technically feasible, personal identifiers are redacted, tokenised or pseudonymised first

Where

European Union (Azure EU Data Zone, Sweden Central)

Stripe

What they do for Autm

Payment processing and subscription billing

Data processed

Billing, transaction and account information. Autm does not store full payment card numbers

Where

May include processing outside the UK and EEA, with appropriate safeguards

Postmark

What they do for Autm

Delivery of service emails, such as invitations, welcome messages and security emails

Data processed

Recipient email addresses and the content of the emails Autm sends

Where

May include processing outside the UK and EEA, with appropriate safeguards

Promptfoo

What they do for Autm

Testing and evaluation of AI behaviour

Data processed

Test inputs and outputs used to check the quality and safety of AI responses. Only testing data is used - never customer data

Where

May include processing outside the UK and EEA, with appropriate safeguards

Autm uses a small number of trusted third parties to help provide and secure the Autm service. Where they process customer personal data on our behalf, they act as sub-processors. This page lists them and explains what each one does.

It should be read alongside our Privacy Policy, Data Retention Policy and Data Processing Agreement.

Our current sub-processors

Sub-processor

What they do for Autm

Data processed

Where

Microsoft Azure

Cloud infrastructure, hosting, storage, monitoring, and key and credential management

Customer data and platform information needed to host and run the service

United Kingdom

Microsoft Azure (Microsoft Foundry)

AI model inference, which lets Autm understand requests and generate responses

Only the information needed for the task, which may include customer personal data. Where appropriate and technically feasible, personal identifiers are redacted, tokenised or pseudonymised first

European Union (Azure EU Data Zone, Sweden Central)

Stripe

Payment processing and subscription billing

Billing, transaction and account information. Autm does not store full payment card numbers

May include processing outside the UK and EEA, with appropriate safeguards

Postmark

Delivery of service emails, such as invitations, welcome messages and security emails

Recipient email addresses and the content of the emails Autm sends

May include processing outside the UK and EEA, with appropriate safeguards

Promptfoo

Testing and evaluation of AI behaviour

Test inputs and outputs used to check the quality and safety of AI responses. Only testing data is used - never customer data

May include processing outside the UK and EEA, with appropriate safeguards

Our current sub-processors

Microsoft Azure

What they do for Autm

Cloud infrastructure, hosting, storage, monitoring, and key and credential management

Data processed

Customer data and platform information needed to host and run the service

Where

United Kingdom

Microsoft Azure (Microsoft Foundry)

What they do for Autm

AI model inference, which lets Autm understand requests and generate responses

Data processed

Only the information needed for the task, which may include customer personal data. Where appropriate and technically feasible, personal identifiers are redacted, tokenised or pseudonymised first

Where

European Union (Azure EU Data Zone, Sweden Central)

Stripe

What they do for Autm

Payment processing and subscription billing

Data processed

Billing, transaction and account information. Autm does not store full payment card numbers

Where

May include processing outside the UK and EEA, with appropriate safeguards

Postmark

What they do for Autm

Delivery of service emails, such as invitations, welcome messages and security emails

Data processed

Recipient email addresses and the content of the emails Autm sends

Where

May include processing outside the UK and EEA, with appropriate safeguards

Promptfoo

What they do for Autm

Testing and evaluation of AI behaviour

Data processed

Test inputs and outputs used to check the quality and safety of AI responses. Only testing data is used - never customer data

Where

May include processing outside the UK and EEA, with appropriate safeguards

AI and your data

We do not train AI models on customer data, and our AI providers are not permitted to. Microsoft may temporarily retain prompts and responses for abuse monitoring, in line with its terms.

Connected services

Services you choose to connect to Autm, such as Slack, Zoom, Google and Microsoft, are not Autm sub-processors. They handle your data under their own terms and privacy policies, and Autm only accesses them within the permissions you grant.

Safeguards for international transfers

Where personal data is transferred outside the United Kingdom or European Economic Area, we use appropriate safeguards as required by data protection law, such as UK adequacy regulations, Standard Contractual Clauses or the UK International Data Transfer Addendum, together with technical measures such as encryption and data minimisation.

Changes to this list

We update this page when we add or replace a sub-processor. Customers are notified of material changes and given a reasonable opportunity to object, as set out in our Data Processing Agreement.

Questions

If you have a question about our sub-processors, email support@autm.ai.