Legal · All documents
The third parties VETos and Nova 5 use to help provide the service, as referenced in the Data Processing Addendum.
Version 1.9 · Last updated 15 October 2026
Supahuman Limited and Supahuman Pty Ltd engage the sub-processors listed below to process Customer Data on your behalf. The list covers VETos and Nova 5; the Used by column shows which. We give at least 30 days' notice before adding or replacing a sub-processor, and you may object on reasonable data-protection grounds, as set out in the Data Processing Addendum.
| Sub-processor | Purpose | Used by | Processing location | Head office |
|---|---|---|---|---|
| Supahuman Limited / Supahuman Pty Ltd | Intra-group: the SupaHuman company that is not your contracting Supplier hosts, operates and supports the Service on the Supplier's behalf | VETos, Nova 5 | Australia (hosting) and New Zealand (support) | Auckland, NZ / Sydney, AU |
| Amazon Web Services | Cloud infrastructure — compute, storage, networking, identity and observability (all production hosting) | VETos, Nova 5 | Sydney, Australia (ap-southeast-2) | Seattle, USA |
| Stripe | Subscription billing and payment processing for Nova 5; cardholder data is held by Stripe (PCI DSS Level 1), not by SupaHuman | Nova 5 | United States and other Stripe regions, under Stripe's data processing terms | San Francisco, USA |
| Anthropic | Large-language-model inference for selected AI features | VETos, Nova 5 | AWS Bedrock, Sydney where the model is available; otherwise US endpoints under enterprise terms | San Francisco, USA |
| OpenAI | Large-language-model inference for selected AI features | VETos, Nova 5 | United States, under enterprise API terms | San Francisco, USA |
| Large-language-model inference (Gemini) for selected AI features | VETos, Nova 5 | Vertex AI, Sydney where the model is available; otherwise US endpoints under enterprise terms | Mountain View, USA |
All large-language-model providers are engaged under enterprise terms that prohibit training on Customer Data and provide for zero or configurable retention. Customer Data (learner records, content and activity) is stored in Australia. Two kinds of processing happen outside Australia: AI inference where no regional endpoint exists for a required model, which customers may opt out of; and payment processing by Stripe for Nova 5 subscriptions, which involves billing contact and card details only, never learner data.
To be notified of changes to this list, contact hello@supahuman.ai.