fini

fini

Last updated: 2 November 2026

Last updated: 2 November 2026

Subprocessors

Subprocessors

Last updated: 2 November 2026

Subprocessors

This page lists the third-party subprocessors Fini uses to provide its Services, as referenced in the Fini Data Processing Addendum (DPA). It is the Subprocessor List referred to in the DPA.

Current subprocessors

Subprocessor

Purpose

Data processed

Location / region

Security / privacy

Google Cloud

Primary cloud hosting and infrastructure

Customer Data (DPA Exhibit A)

EU / US (config dependent)

Microsoft Azure

LLM inference (API-based processing only)

Details on request (legal@usefini.com)

EU / US (config dependent)

Amazon Web Services (AWS)

Cloud infrastructure

Details on request (legal@usefini.com)

EU / US (config dependent)

Supabase

Managed database services

Customer Data (DPA Exhibit A)

EU / US (config dependent)

OpenAI

LLM inference (enterprise agreement)

Customer Data (DPA Exhibit A); not used for model training, per the DPA

US

Anthropic

LLM inference (enterprise agreement)

Customer Data (DPA Exhibit A); not used for model training, per the DPA

US

PostHog

Product analytics

Usage metrics only

EU / US (config dependent)

Sentry

Error monitoring and logging

Details on request (legal@usefini.com)

EU / US (config dependent)

Stripe

Billing and subscription management

Details on request (legal@usefini.com)

US

Linear

Issue tracking

Details on request (legal@usefini.com)

US

Google

Email

Details on request (legal@usefini.com)

US

Langfuse

Tracing

Details on request (legal@usefini.com)

US

Google Cloud

Purpose: Primary cloud hosting and infrastructure

Data processed: Customer Data (DPA Exhibit A)

Location / region: EU / US (config dependent)

Microsoft Azure

Purpose: LLM inference (API-based processing only)

Data processed: Details on request (legal@usefini.com)

Location / region: EU / US (config dependent)

Amazon Web Services (AWS)

Purpose: Cloud infrastructure

Data processed: Details on request (legal@usefini.com)

Location / region: EU / US (config dependent)

Supabase

Purpose: Managed database services

Data processed: Customer Data (DPA Exhibit A)

Location / region: EU / US (config dependent)

OpenAI

Purpose: LLM inference (enterprise agreement)

Data processed: Customer Data (DPA Exhibit A); not used for model training, per the DPA

Location / region: US

Anthropic

Purpose: LLM inference (enterprise agreement)

Data processed: Customer Data (DPA Exhibit A); not used for model training, per the DPA

Location / region: US

PostHog

Purpose: Product analytics

Data processed: Usage metrics only

Location / region: EU / US (config dependent)

Sentry

Purpose: Error monitoring and logging

Data processed: Details on request (legal@usefini.com)

Location / region: EU / US (config dependent)

Stripe

Purpose: Billing and subscription management

Data processed: Details on request (legal@usefini.com)

Location / region: US

Linear

Purpose: Issue tracking

Data processed: Details on request (legal@usefini.com)

Location / region: US

Google

Purpose: Email

Data processed: Details on request (legal@usefini.com)

Location / region: US

Langfuse

Purpose: Tracing

Data processed: Details on request (legal@usefini.com)

Location / region: US

Data location

Per the DPA, Customer Data is stored and processed primarily within the Designated Region for your account, either the United States or the European Union. Within the Designated Region, Fini hosts Customer Data across its infrastructure Subprocessors and routes Customer Data to the endpoints of its large language model and AI Subprocessors located in, or nearest to, the Designated Region where such endpoints are available. Where a row above shows EU / US (config dependent), the region follows your account configuration.

Changes to this list

Section 1 of the DPA sets out how customers are notified before a new subprocessor is added:


“In the event that Fini seeks to use additional Subprocessors and update the Subprocessor List, Fini will provide at least thirty (30) days’ prior notice of such additional Subprocessors to you before the new Subprocessor begins processing Customer Data (which may be via email, a posting or notification on an online portal for our services or other reasonable means). In the event that you do not wish to consent to the use of such additional Subprocessor, you may notify Fini that you do not consent within fifteen (15) days on reasonable grounds relating to the protection of Customer Data by following the instructions set forth in the Subprocessor List or contacting legal@usefini.com.”


To object to a new subprocessor, email legal@usefini.com within fifteen (15) days of the notice.

Questions

If you have any questions about this list, please reach out to legal@usefini.com

>