Subprocessors
Version 1.0 · Effective August 8, 2026
Ellis Intelligence LLC — Subprocessors
Phase 0 — Pre-launch. Commercial activity has not commenced; self-hosted today; production migrations to Fly.io and Cloudflare R2 occur before public launch.
Version 1.0 · Effective at product launch
What this page is. Ellis Intelligence LLC (a product of Ellis Intelligence LLC) engages the third parties below ("Subprocessors") to process Customer Data on our behalf in delivering the Service. This is the public disclosure described in our Data Processing Addendum ("DPA") §5.1, kept current as our stack changes.
Ellis Intelligence LLC, a Colorado limited liability company, operates Ellis Intelligence LLC as a d/b/a; Ellis Intelligence LLC is not a separate legal entity. This page describes the Subprocessors used specifically by the Ellis Intelligence LLC Service. Ellis Intelligence LLC has no subsidiaries or affiliated entities, and no entity other than Ellis Intelligence LLC processes Customer Data as part of the Service.
Update cadence & your objection right
We review this list quarterly. Before we engage a new Subprocessor, we specifically inform affected customers in writing — by email to the account's designated contacts, or by in-product notice — with notice deemed given when sent, and we post the change here in addition to (not instead of) that written notice. Customers have 30 days from the date notice is given to object on reasonable data-protection grounds; a timely objection suspends our use of the new Subprocessor for that customer pending resolution, per DPA §5.3.
Current Subprocessors
Ellis Intelligence LLC — the vendors we engage directly, at the entity level
Ellis Intelligence LLC has no product Service of its own and processes no tenant Customer Data. It is, however, the contracting entity behind all fifteen brand products, and it engages the vendors below directly — for this corporate site, for our own internal operations tooling, and as the counterparty on the infrastructure and services common to every brand. A brand's own product-level Subprocessors — the vendors that process that brand's Customer Data — are listed on that brand's own page; see "Our Brands' Own Subprocessor Lists" below.
Infrastructure and hosting
| Subprocessor | Purpose | Data accessed | Region | Notes |
|---|---|---|---|---|
| Fly.io, Inc. | Production application hosting, contracted at the entity level, for our brand products (chosen production host, decided 2026-06-27) | Brand-product tenant data in transit and at rest, per brand — no Ellis Intelligence LLC entity-level data | US (iad/Ashburn, VA) |
See the individual brand's own subprocessor list for that brand's specific data flow. |
| Cloudflare, Inc. (including Cloudflare R2) | DNS, edge/CDN delivery, DDoS protection, and WAF for this site and our brand products; continuous database backup (via Litestream) to Cloudflare R2 | Network and request metadata for this site; encrypted backup copies of brand-product databases | US, with a global edge network; data at rest US | Same vendor for edge delivery and backup — see Data Residency below. |
Artificial intelligence
| Subprocessor | Purpose | Data accessed | Region | Notes |
|---|---|---|---|---|
| Anthropic, PBC | Large-language-model API for Ellis Intelligence LLC's own internal operations tooling | Internal operations content we submit to the API for our own use — not any brand's Customer Data | US | Each brand's own use of an AI subprocessor in its product, where applicable, is disclosed on that brand's own subprocessor list. |
Billing and communications
| Subprocessor | Purpose | Data accessed | Region | Notes |
|---|---|---|---|---|
| Stripe, Inc. | Payment-processing infrastructure held at the entity level; a brand's billing routes through Stripe where that brand has a live payment path | Billing contact name and email, tokenized payment method | US | We do not store card numbers. |
| Resend Inc. | Transactional and company email delivery | Recipient email address, message content | US | |
| Google LLC (Workspace) | Business email and document collaboration for Ellis Intelligence LLC | Our own email and document content — not any brand's Customer Data | US |
A vendor we have not engaged is never listed here — planned or candidate vendors are disclosed, if at all, through the notice mechanics above, at the time we engage them.
Subprocessors NOT used. We do not use any third-party advertising, analytics-retention, or data-broker vendor.
Our Brands' Own Subprocessor Lists
Ellis Intelligence LLC operates fifteen software brands as d/b/a's; each is not a separate legal entity. Where a brand offers a product Service, that brand discloses the Subprocessors used specifically by its own product — the vendors that process that brand's Customer Data — on its own page, not on this one:
| Brand | Subprocessor list |
|---|---|
| EllisIQ | ellisiq.com/subprocessors |
| Peony & Lace | peonyandlace.com/subprocessors |
| Reply Engine | get-replyengine.com/subprocessors |
| Underwrite | get-underwrite.com/subprocessors |
| Foothold | get-foothold.com/subprocessors |
| PlainNotice | plainnotice.com/subprocessors |
| GovernMark | governmark.com/subprocessors |
| AccessConform | accessconform.com/subprocessors |
| DefenseScore | defensescore.com/subprocessors |
| RIAMark | riamark.com/subprocessors |
| SafeguardsMark | safeguardsmark.com/subprocessors |
| SRAReady | sraready.com/subprocessors |
| DSAR Engine | dsarengine.com/subprocessors |
| RenewalProof | renewalproof.com/subprocessors |
| BreachDuty | breachduty.com/subprocessors |
Data Residency
Data at rest is stored in the United States. Data remains in the U.S. unless otherwise disclosed. Some of our infrastructure providers operate global edge networks for content delivery; data at rest stays U.S.-only under our configuration.
Customers Outside the United States
We do not currently market to or onboard customers in jurisdictions that prohibit U.S. data processing under their data-protection law. Customers in the EU/EEA, UK, or Switzerland may onboard subject to the Standard Contractual Clauses ("SCCs") incorporated by reference into our DPA (together with the UK Addendum, for UK transfers).
Audit Rights
You may request a summary of our subprocessor-management practices by emailing [email protected]. SOC 2 Type I is planned; an auditor has not yet been engaged; our report will be available under NDA once complete. We do not permit direct audit of our Subprocessors; we share their relevant audit reports under NDA.
For a customer whose personal data is transferred under the SCCs or the UK Addendum incorporated into our DPA, nothing in this section limits that customer's audit and inspection rights under Clause 8.9 of the SCCs. For that customer, an audit request is satisfied first by our security-posture documentation (or SOC 2 report, once one exists) together with the relevant Subprocessors' audit reports under NDA; any further Clause 8.9 inspection is conducted on reasonable notice, during business hours, subject to confidentiality obligations, and at the customer's expense except where the audit reveals material non-compliance.
Contact Us
Ellis Intelligence LLC Attn: Privacy & Security — Ellis Intelligence LLC Email: [email protected]
Related: Privacy Policy · Terms. This list is referenced by, and generated in accordance with, our Data Processing Addendum. Ellis Intelligence LLC, a Colorado limited liability company, operates the Service directly; Ellis Intelligence LLC has no subsidiaries or affiliated entities, and no entity other than Ellis Intelligence LLC processes Customer Data as part of the Service.
Disclaimer. This site is informational and pre-launch. Nothing here is an offer, solicitation, or professional advice. Ellis Intelligence LLC is a software studio; no commercial activity has commenced. Questions about this document? Email [email protected].