Apollo Research Terms of Service

We provide artificial intelligence-powered software services including data analysis and coding agent tools (Services), as set out in more detail on our website (Site). Our Services include our Watcher platform and other Apollo products available through the Site.

In these Terms, when we say you or your, we mean you as an individual if you are accepting these Terms for yourself. If you are accepting these Terms on behalf of an entity (such as your employer) and you are authorised to do so, then you or your means that entity. When we say we, us, or our, we mean Apollo Research AI Ltd, a company registered in England and Wales with company number 15289159.

Our contact details:

Phone number:

Geographical address: 7 Bell Yard, London, England, WC2A 2JR
Email address: legal@apolloresearch.ai

These terms and conditions (Terms) form our contract with you, and set out our obligations as a service provider and your obligations as a customer. We will provide the Services to you in accordance with these Terms and all applicable law.

Some capitalised words in these Terms have defined meanings, and each time that word is used in these Terms it has the same meaning. You can find a list of the defined words and their meaning at the end of these Terms.

1. Engagement and Term

1.1

These Terms apply from the time you agree to these Terms, until the date these Terms are terminated in accordance with their Terms (Term).

1.2

Subject to your compliance with these Terms, we will provide you with access to the Services.

1.3

We will not be responsible for any other services unless expressly set out in these Terms or on our Site.

1.4

If we provide you with access to any new or beta services, you acknowledge that because of the developmental nature of such services, you use them at your own risk and we have no obligation to maintain or provide error corrections. Any new or beta services we provide you with access to are for evaluation purposes only and not for production use, and we may discontinue those services at any time at our sole discretion.

1.5

Where you engage third parties to operate alongside the Services (for example, any third-party software systems you wish to integrate with the Services), those third parties are independent of us and you are responsible for (meaning we will not be liable for) the goods or services they provide, unless we expressly agree otherwise.

2. Account

2.1

You must sign up for an Account in order to access and use the Services.

2.2

You may invite Authorised Users to access and use the Services under your Account. You are responsible for ensuring that your Authorised Users comply with these Terms. You may change who your Authorised Users are at any time through your Account, and what access rights or permissions they have when using the Services. Any limitations on the number of Authorised Users you can have will be set out in your Account or on the Services.

2.3

While you have an Account with us, you agree to (and to ensure your Authorised Users agree to):

(a)
keep your information up-to-date (and ensure it remains true, accurate and complete);
(b)
keep usernames and passwords secure and confidential, and protect them from misuse or being stolen; and
(c)
notify us if you become aware of, or have reason to suspect, any unauthorised access to your Account or any logins linked to your Account.
2.4

If you close your Account, you and your Authorised Users will lose access to the Services.

3. Fees and Payment

The fees for the Services and payment terms will be set out in your Account when you sign up (Fees). You agree to pay the Fees in accordance with the payment terms specified in your Account.

4. Licence

4.1

During the Term, we grant you and your Authorised Users a right to use our basic Services in accordance with these Terms. This right cannot be passed on or transferred to any other person.

4.2

You must not (and you must ensure that your Authorised Users do not):

(a)
access or use the Services in any way that is improper or breaches any laws, infringes any person's rights (for example, intellectual property rights and privacy rights), or gives rise to any civil or criminal liability;
(b)
interfere with or interrupt the supply of the Services, or any other person’s access to or use of the Services;
(c)
introduce any viruses or other malicious software code into the Services;
(d)
use any unauthorised or modified version of the Services, including for the purpose of building similar or competitive software or for the purpose of obtaining unauthorised access to the Services;
(e)
attempt to access any data or log into any server or account that you are not expressly authorised to access;
(f)
use the Services in any way that involves service bureau use, outsourcing, renting, reselling, sublicensing, concurrent use of a single user login, or time-sharing;
(g)
circumvent user authentication or security of any of our networks, accounts or hosts or those of any third party; or
(h)
access or use the Services to transmit, publish or communicate material that is, defamatory, offensive, abusive, indecent, menacing, harassing or unwanted.

5. Availability, Disruption and Downtime

5.1

While we strive to always make the Services available to you, we do not make any promises that these will be available 100% of the time. The Services may be disrupted during certain periods, including, for example, as a result of scheduled or emergency maintenance. For the avoidance of doubt, the Services are not provided with any service level agreement or uptime commitment, and we do not guarantee any minimum level of availability or performance.

5.2

The Services may interact with, or be reliant on, products or services provided by third parties, such as cloud hosting service providers. To the maximum extent permitted by law, we are not liable for disruptions or downtime caused or contributed to by these third parties.

5.3

We will try to provide you with reasonable notice, where possible, of any disruptions to your access to the Services.

6. Intellectual Property and Data

6.1

We own all intellectual property rights in and to the Services. This includes how the Services look and function, as well as our copyrighted works, trademarks, inventions, designs and other intellectual property. You agree not to copy or otherwise misuse our intellectual property without our written permission (for example, to reverse engineer or discover the source code of our intellectual property), and you must not alter or remove any confidentiality, copyright or other ownership notice placed on the Services.

6.2

We may use any feedback or suggestions that you give us in any manner which we see fit (for example, to develop new features), and no benefit will be owed to you as a result of any use by us of your feedback or suggestions. You hereby assign to us (with full title guarantee) by way of present and future assignment all rights (including intellectual property rights) in and to your feedback and suggestions.

Your Data

6.3

We do not own any of Your Data, but when you enter or upload any of Your Data into the Services, you grant us the right to access, analyse, backup, copy, store, transmit, and otherwise use Your Data for the duration of your use of the Services (and for a reasonable period of time afterwards). Unless your plan says otherwise, we may use Your Data (or disclose it to third party service providers) to:

(a)
supply the Services to you and your Authorised Users (for example, to enable you and your Authorised Users to access and use the Services), and otherwise perform our obligations under these Terms;
(b)
diagnose problems with the Services;
(c)
improve, develop and protect the Services;
(d)
send you information we think may be of interest to you based on your marketing preferences;
(e)
perform analytics for the purpose of remedying bugs or issues with the Services; or
(f)
perform our obligations under these Terms (as reasonably required).
6.4

You acknowledge and agree that because of the nature of the internet, the processing and transmission of Your Data by us may occur over various networks.

6.5

You are responsible for (meaning we are not liable for):

(a)
the integrity of Your Data on your systems, networks or any device controlled by you or your Authorised Users; and
(b)
backing up Your Data.
6.6

When you use the Services, we may collect Usage Data and generate de-identified data from Your Data and use of the Services (for example, through aggregation). We own that data and may use it for our own purposes, such as to provide and improve the Services, to improve our monitoring and grading capabilities, to develop new services or product offerings and to identify business trends. Where we make any such data publicly available, we will use commercially reasonable efforts to de-identify it so that it does not identify you. For the avoidance of doubt, Usage Data is not Your Data and does not require anonymisation before we may use it.

6.7

If you do not provide Your Data to us, it may impact your ability to receive the Services.

6.8

The Services are not designed to process Sensitive Data. You must not submit Sensitive Data into the Services unless expressly supported by the functionality and with our express prior written consent.

6.9

This clause 6 will survive the termination or expiry of these Terms.

7. Use of Artificial Intelligence

7.1

The Services utilise artificial intelligence and machine learning technologies. You acknowledge that:

(a)
AI-generated outputs may vary in accuracy and should be reviewed before relying on them;
(b)
the Services are designed to assist with data analysis and coding tasks but do not replace human judgment; and
(c)
we may improve our AI models, which may result in changes to how the Services function over time.

8. Confidential Information

8.1

While using the Services, you may share confidential information with us, and you may become aware of confidential information about us. You agree not to use our confidential information, and to take reasonable steps to protect our confidential information from being disclosed without our permission, and we agree to do the same for your confidential information. This also means making sure that any Authorised Users, employees, contractors, professional advisors or agents of ours or yours only have access to confidential information on a ‘need-to-know basis’ (in other words, the disclosure is absolutely necessary), and that they also agree to not misuse or disclose such confidential information.

8.2

However, either you or we may share confidential information with legal or regulatory authorities if required by law to do so.

8.3

You must only disclose another person’s data (including Personal Data) to us if you have the right to do so (such as having the person’s express consent). If you disclose such data to us without the right to do so, notwithstanding anything to the contrary in these Terms, you are solely responsible for any consequences arising from that disclosure, including any claims, regulatory action or penalties, and we will have no liability in respect of such data.

8.4

Where we are required by law to report on our activities, you acknowledge that from time to time we may request certain information from you in order to meet our requirements, and you agree to provide us with such information within the timeframes reasonably requested by us.

8.5

This clause 8 will survive the termination or expiry of these Terms.

9. Liability

9.1

Nothing in these Terms limits any liability which cannot legally be limited, including Liability for:

(a)
death or personal injury caused by negligence; and
(b)
fraud or fraudulent misrepresentation.
9.2

Subject to the clauses above, to the maximum extent permitted by law, we will not be liable for any Liability caused or contributed to by, arising from or in connection with:

(a)
your computing environment (for example, your hardware, software, information technology and telecommunications services and systems); or
(b)
any use of the Services by a person or entity other than you or your Authorised Users.
9.3

Subject to clauses 9.1 and 9.2 above, but despite anything else to the contrary in these Terms, to the maximum extent permitted by law:

(a)
neither Party will be liable for Consequential Loss;
(b)
a Party’s liability for any Liability under these Terms will be reduced proportionately to the extent the relevant Liability was caused or contributed to by the acts or omissions of the other Party (or any of its Personnel), including any failure by that other Party to mitigate its loss; and
(c)
our aggregate liability for any Liability arising from or in connection with these Terms (including the Data Processing Addendum) will be limited to 100% of the Fees paid or payable by you.
9.4

This clause 9 will survive the termination or expiry of these Terms.

10. Suspension and Termination

Suspension

10.1

We may suspend your access to the Services where we reasonably believe there has been any unauthorised access to or use of the Services (such as the unauthorised sharing of login details for the Services). If we suspend your access to the Services, we will let you know within a reasonable time of doing so, and we will work with you to resolve the matter, or if it cannot be resolved, then we may terminate these Terms and your access to the Services will end.

Termination

10.2

Either Party may terminate these Terms for convenience by providing the other Party with at least 30 days’ written notice.

10.3

We may terminate these Terms immediately by giving you written notice if:

(a)
you or your Authorised Users breach these Terms and do not remedy that breach within 14 days of us notifying you of that breach;
(b)
you or your Authorised Users breach these Terms and that breach cannot be remedied; or
(c)
you experience an insolvency event (including bankruptcy, receivership, administration, liquidation, or entering into creditors’ schemes of arrangement).
10.4

You may terminate these Terms if we breach these Terms and do not remedy that breach within 14 days of you notifying us of that breach.

10.5

Upon termination of these Terms, we will retain Your Data (including copies) as required by law or regulatory requirements.

10.6

Termination of these Terms will not affect any other rights or liabilities that we or you may have.

10.7

This clause 10 will survive the termination or expiry of these Terms.

11. General

11.1

Assignment: You may not transfer or assign these Terms (including any benefits or obligations you have under these Terms) to any third party without our prior written consent. We may assign or transfer these Terms to a third party, or transfer any debt owed by you to us to a debt collector or other third party.

11.2

Complaints and Feedback: We are always looking to improve our services and products. If you have any feedback or a complaint, please notify us on our contact details set out in these Terms and we will take reasonable steps to address any concerns you have.

11.3

Contracts (Rights of Third Parties) Act 1999: Notwithstanding any other provision of these Terms, nothing in these Terms confers or is intended to confer any right to enforce any of its terms on any person who is not a party to it.

11.4

Disputes: A Party may not commence court proceedings relating to any dispute arising from, or in connection with, these Terms (Dispute) without first meeting a representative of the other Party within 14 days of notifying that other Party of the Dispute. If the Parties cannot resolve the Dispute at that meeting, either Party may refer the Dispute to mediation administered by The Centre for Effective Dispute Resolution.

11.5

Events Outside Our Control: We will not be liable for any delay or failure to perform our obligations (including the Services), if such delay or failure is caused or contributed to by an event or circumstance beyond our reasonable control.

11.6

Governing law: These Terms are governed by the laws of England and Wales and both parties submit to the exclusive jurisdiction of the courts operating in England and Wales.

11.7

Illegal Requests: We reserve the right to refuse any request for or in relation to the Services that we deem inappropriate, unethical, unreasonable, illegal or otherwise non-compliant with these Terms.

11.8

Nature of Legal Relationship: These Terms do not create, and should not be interpreted so as to create, a partnership, joint venture, employment or agency relationship between us and you.

11.9

Notices: Any notice you send to us must be sent to the email set out at the beginning of these Terms. Any notice we send to you will be sent to the email address registered against your Account.

11.10

Data Protection: If you are not a consumer, the attached Data Processing Addendum forms part of these Terms to the extent Personal Data is processed in connection with the Services or these Terms. To the extent of any inconsistency between these terms and conditions and the Data Processing Addendum, the Data Processing Addendum will prevail with respect to such Processing of Personal Data.

11.11

Professional Services Disclaimer: The Services do not constitute, and are not a substitute for, financial, legal or risk management advice.

11.12

Publicity: You agree that we may, with your written consent, advertise or publicise the fact you are a customer of ours, for example on the Site or in our promotional material, and you grant us a right to display and use your logo and branding solely for that purpose.

12. Definitions

In these Terms:

Account means an account accessible to the individual or entity who signed up to the Services, under which Authorised Users may be granted with access.

Authorised User means a user that you have invited to use the Services through your Account.

Consequential Loss includes any consequential loss, special or indirect loss, real or anticipated loss of profit, loss of benefit, loss of business, loss of goodwill, loss of opportunity, loss of savings, loss of reputation, loss of use and/or loss or corruption of data, whether under statute, contract, equity, tort (including negligence), indemnity or otherwise.

Liability means any expense, cost, liability, loss, damage, claim, notice, entitlement, investigation, demand, proceeding or judgment (whether under statute, contract, equity, tort (including negligence), indemnity or otherwise), howsoever arising, whether direct or indirect and/or whether present, unascertained, future or contingent and whether involving a third party or us or you or otherwise.

Sensitive Data: any health data, any other special categories of personal data (as listed in Article 9(1) of UK GDPR) and any data relating to criminal convictions and offences or related security measures (interpreted in accordance with Article 10 UK GDPR).

Services means the services we provide to you, as detailed at the beginning of these Terms.

Usage Data means data generated by the operation and use of the Services relating to the performance, availability, integrity and security of the Services, including feature usage statistics, performance metrics, error logs, and system telemetry or any other data or information that is generated as a result of your usage of the Services that is a back-end or internal output or an output otherwise generally not available to users of the Services. Usage Data is owned by us.

Your Data means the information, materials, logos, documents, qualifications and other intellectual property or data (including Personal Data) supplied by you and your Authorised Users for receiving the Services and stored by the Services and the reports that are made available to you in the Services, except that Your Data does not include Usage Data or any other data or information that is generated under clause 6.6.

The words including and such as (and any cognates thereof or similar expressions) shall be read as “including without limitation” and do not limit the sense of the words preceding them.

DATA PROCESSING ADDENDUM

1. Roles of the Parties

1.1

This Data Processing Addendum (DPA) applies to the extent the Parties process Transferred Data.

1.2

Except as set out in paragraph 1.3 of this DPA, you are the Controller of Transferred Data and we are Processing Transferred Data on your behalf as your Processor. Attachment A sets out the required description of such Processing and may be updated from time to time by written agreement of the Parties.

1.3

We shall act as an independent Controller where Processing: (a) your contact information and the contact information of your Authorised Users and other personnel that we receive in connection with the Services and the Terms, (b) Personal Data collected for or in Usage Data and Feedback, and (c) Personal Data processed in accordance with clause 6.6. Where we act as an independent Controller only paragraphs 1, 2 and 4 of this DPA apply.

1.4

You shall comply with the Data Protection Law and all other applicable data protection and privacy laws in the Processing of Transferred Data.

1.5

We shall comply with Data Protection Law in the Processing of Transferred Data.

2. Your obligations as Controller

2.1

Without prejudice to the generality of paragraph 1.4 of this DPA, you warrant and represent that you have all rights and consents, and have provided all notices, as required by the Data Protection Law and all other applicable data protection and privacy laws to lawfully (a) Process Transferred Data in connection with the Services and (b) permit us to Process Transferred Data in order to provide the Services to you and perform and exercise our rights and obligations under the Terms (including this DPA).

2.2

You will defend, indemnify and hold us harmless from and against any third party claim arising out of or in connection with any breach of paragraph 2.1.

3. Processing of Personal Data as your Processor

3.1

Where we act as your Processor:

(a)
you instruct us to Process Transferred Data in accordance with the Terms, including this Data Processing Addendum (including in accordance with Attachment A); and
(b)
we agree not to Process Transferred Data other than on your documented instructions.

4. Security

4.1

Taking into account the state of the art, the costs of implementation and the nature, scope, context and purposes of Processing as well as the risk of varying likelihood and severity for the rights and freedoms of natural persons, we agree to implement appropriate technical and organisational measures in relation to the Transferred Data designed to ensure a level of security appropriate to that risk in accordance with the Data Protection Law.

5. Sub-Processing

5.1

You authorise our engagement of the Sub-Processors already engaged by us at the Commencement Date, which are set out in Attachment B.

5.2

Where we wish to engage a new Sub-Processor, we agree to provide written notice to you of the details of the engagement of the Sub-Processor at least 14 days’ prior to engaging the new Sub-Processor (including details of the processing it will perform). You may object in writing to our appointment of a new Sub-Processor within 7 days of such notice, provided that such objection is based on reasonable grounds relating to data protection. In such event, the Parties will discuss such concerns in good faith with a view to achieving resolution. If the Parties are not able to achieve resolution, we may, at our election:

(a)
not appoint the proposed Sub-Processor;
(b)
not disclose any Transferred Data we Process on your behalf to the proposed Sub-Processor; or
(c)
terminate the Services (and the Terms) without further liability to you.
5.3

You agree that the remedies described above are the only outcomes available if you object to our engagement of any proposed Sub-Processor.

5.4

Where we engage a Sub-Processor to Process Transferred Data, we agree to enter into a written agreement with the Sub-Processor containing data protection obligations substantially as protective that those in this Data Processing Addendum with respect to the Transferred Data, and to remain responsible to you for the performance of such Sub-Processor’s data protection obligations under such terms.

5.5

Where the transfer of Transferred Data from us to a Sub-Processor is a Restricted Transfer, it will be subject to a UK Transfer Mechanism (and documents or legislation referred to within it) and the UK Transfer Mechanism is considered an appropriate safeguard.

6. Data Subject Rights

6.1

We agree to:

(a)
notify you within 5 business days if we receive a request from a Data Subject under the Data Protection Law in respect of Transferred Data;
(b)
provide reasonable assistance to you in responding to such request at your cost (to be charged on a reasonable time and materials basis); and
(c)
not respond to such a request except on your documented instructions or as required by applicable law, in which case we shall, to the extent permitted by applicable law, inform you of that legal requirement before we respond to the request.

7. Personal Data Breach

7.1

We agree to notify you without undue delay upon becoming aware of a Personal Data Breach affecting Transferred Data, and to provide you with reasonable information to allow you to meet any obligations to report or inform Data Subjects of the Personal Data Breach under the Data Protection Law.

7.2

We agree to take reasonable commercial steps to investigate, mitigate and remediate each such Personal Data Breach, and to keep you reasonably informed of the same on your request.

7.3

If you decide to notify a Supervisory Authority, Data Subject or any other person of a Personal Data Breach, you agree to provide us with advance copies of the proposed notices and, subject to the Data Protection Law (including any mandated deadlines under it), allow us an opportunity to provide any clarifications or corrections to those notices.

8. Data Protection Impact Assessment and Prior Consultation

8.1

We agree to provide reasonable assistance to you, at your cost (to be charged on a reasonable time and materials basis), with any data protection impact assessments, and prior consultations with Supervisory Authorities, which you reasonably consider to be required by the Data Protection Law.

9. Deletion or Return

9.1

Subject to any document retention requirements at law, we agree to without undue delay and in any event within 30 business days of the date of cessation of any Services involving the Processing of Transferred Data, delete and procure the deletion of all copies of those Transferred Data to the extent Processed as Your Processor.

10. Audit Rights

10.1

Subject to paragraph 10.2 of this DPA, to the extent we act as Your Processor and are required by the Data Protection Law, we shall:

(a)
make available to You on request such information reasonably necessary to demonstrate our compliance with this Data Processing Addendum; and
(b)
allow for and contribute to audits, including inspections, by you or an auditor mandated by you in relation to the Processing of Transferred Personal Data by us as Your Processor.
10.2

Any audit (or inspection):

(a)
must be conducted during our regular business hours, with reasonable advance notice (which shall not be less than 30 business days);
(b)
will be subject to our reasonable confidentiality, data protection and information security procedures, policies and terms;
(c)
must be limited in scope to matters specific to you and agreed in advance with us;
(d)
must not require us to disclose to You any information that could cause us to breach any of our obligations under the Data Protection Law or to our other customers or providers, including to disrupt the provision of services to any customer;
(e)
excludes third party systems and premises;
(f)
any third party auditor must be agreed by us in writing, and execute a reasonable non-disclosure agreement with us;
(g)
all costs of the audit, including any third party costs and to the extent we need to expend time to assist you with the audit (or inspection), will be funded by you; and
(h)
may only be performed a maximum of one time per year, except where required by a competent Supervisory Authority under Data Protection Law or where there has been a Personal Data Breach in relation to Transferred Personal Data caused by us.

11. Definitions

11.1

In this Data Processing Addendum, capitalised terms have the meaning given to them in the main body of the Terms, and as follows:

Data Protection Law means the United Kingdom Data Protection Act 2018 (DPA 2018) and the UK GDPR (as defined by section 3(10) (as supplemented by section 205(4)) of the DPA 2018).

Restricted Transfer means a transfer of Personal Data from the United Kingdom that is subject to Chapter V of the UK GDPR.

Sub-Processor means a third party Processor that we appoint when acting as your Processor to Process Transferred Data on your behalf.

Supervisory Authority means the UK Information Commissioner, or any successor to them under Data Protection Law

Transferred Data means any Personal Data that is Processed by us in connection with the Services or the Terms.

UK Transfer Mechanism means the legal methods and safeguards permitted under the Data Protection Law for effecting Restricted Transfers, including adequacy decisions, standard contractual clauses, binding corporate rules, and other appropriate safeguards as recognised under the Data Protection Law.

11.2

The terms “Controller”, “Data Subject”, “Personal Data”, “Personal Data Breach”, “Processing” (including “Processed” and derivatives thereof) and “Processor” shall have the same meaning as in the Data Protection Law.

ATTACHMENT A – DESCRIPTION OF TRANSFER

Categories and Treatment of Personal Data
Types of Personal Data

Select all that apply:

Basic identifying information
☒ First name
☐ Middle name
☒ Last name
☐ Maiden name
☐ Date of birth
☐ Sex
☐ Gender
☐ Nationality
☐ Home address
☒ Email address
☒ Phone number
Identification information
☐ Tax numbers
☐ Driver’s license number
☐ Passport number
☐ Government identifier
Educational information
☐ Qualifications
☐ Academic records
☐ Training certificates
Lifestyle and preferences
☐ Hobbies and interests
☐ Dietary preferences
Employment information
☒ Job title and position
☐ Employer details
☐ Employment history
☐ Salary information
☐ Performance reviews
Online identifiers
☒ IP address
☒ Cookie data
☒ Device IDs
☒ Location data
Family information
☐ Marital status
☐ Dependents’ details
☐ Emergency contact information
Professional information
☐ Professional memberships
☐ Licenses and certifications
Financial information
☐ Bank account details
☐ Credit card information
☐ Income details
☐ Tax records
☐ Superannuation or pension details
Social media data
☐ Social media profiles
☐ Posts and interactions
☐ Friends and connections
Customer interaction data
☐ Purchase history
☒ Customer service records
☐ Feedback and complaints
Audio-visual data
☐ Photographs
☐ Video recordings
☐ Voice recordings

Other:

Sensitive Data: Types of Special Categories of Personal Data and Criminal Convictions and Offences

Select one:

☒ Special Categories of Data will not be processed.

☐ The transferred data includes data relating to:

  • racial or ethnic origin
  • political opinions
  • religious or philosophical beliefs
  • trade union membership
  • genetic data
  • biometric data for the purpose of uniquely identifying a natural person
  • physical or mental health
  • sex life or sexual orientation
  • criminal convictions and offences
Categories of Data Subjects

Select all that apply:

☒ Anyone about whom Personal Data is input into the Services.
☒ Authorised users of the Services.
☒ Business contact representatives.
☒ Employees, contractors and other Personnel.
Other:
Subject Matter and Nature of the Transfer To provide the Services.
Purpose of the Processing In connection with the provision of the Services.
Duration of the Processing The term of the Services and for a period of 30 days after the time the Services have stopped being supplied.

ATTACHMENT B – LIST OF SUB-PROCESSORS

List of Sub-Processors
Sub-Processor Name Location Purpose/Services
Open AI United States AI monitoring and grading of agent behaviour
Amazon Web Services (AWS) EU (London, eu-west-2) Cloud infrastructure, database hosting
Anthropic United States AI monitoring and grading of agent behaviour
Google United States AI monitoring and grading of agent behaviour