Legal
Sub-processors
Effective date: October 21, 2026
Solomon AI Inc. ("Eigenn", "we", "us") engages the third-party sub-processors below to help us provide and operate the Service. We require each sub-processor by contract to protect personal data consistent with our Privacy Policy and applicable data protection laws. Provider use depends on deployment configuration and enabled features; listing a provider does not mean every user sends data to it. Some providers are used only when you enable the related feature — for example, a bank-connection provider is engaged only for the provider you choose to connect.
| Sub-processor | Purpose | Data processed | Primary location |
|---|---|---|---|
| Stripe | Payment processing and subscription billing | Billing details and payment method metadata | United States |
| WorkOS | Authentication, single sign-on, and organization identity | Account identifiers and authentication data | United States |
| Plaid | Bank account connections (when you connect a bank via Plaid) | Bank account, balance, and transaction data | United States |
| GoCardless | Bank account connections via open banking | Bank account, balance, and transaction data | United Kingdom and European Union |
| Enable Banking | Bank account connections via European open banking | Bank account, balance, and transaction data | European Union |
| Teller | Bank account connections in the United States | Bank account, balance, and transaction data | United States |
| Twilio | SMS and automated voice reminders where configured | Recipient phone numbers, message or call content, delivery status, and provider identifiers | See applicable provider agreement |
| Resend | Transactional and product email delivery | Email addresses and message content | United States |
| Amazon Web Services | Cloud hosting for the application, databases, and background processing | All Service data stored or processed by the application | United States |
| Vercel | Application hosting and content delivery where configured | Technical and usage data needed to serve the application | United States |
| AI routing and model providers (OpenRouter and the models it routes to, such as OpenAI) | AI assistant, transaction categorization, and document understanding | Prompts, conversation history, documents, and business context retrieved by tools or processed by enabled AI features | United States |
| Mistral AI | Document OCR, classification, and structured extraction where configured | Document text, file content, and extraction context | See applicable provider agreement |
| Document and tag embeddings; Google Analytics (analytics consent); Maps Platform address suggestions; connected Gmail and Google account APIs where enabled | Embedding text, page views and device data, address search text, authorization data, mail and attachment API requests, and contact data within granted permissions | See applicable provider agreement | |
| Microsoft | Connected Outlook account authorization and mail access | Account identifiers, authorization data, and mail or attachment API requests | See applicable provider agreement |
| Slack | Connected assistant interactions and supported file imports | Account and channel identifiers, messages, assistant replies, shared files, and authorization data | See applicable provider agreement |
| Meta (WhatsApp) | Linked WhatsApp assistant interactions where configured | Phone numbers, messages, assistant replies, and proposal decisions | See applicable provider agreement |
| Composio | Supported managed account connections and integration actions | Connection credentials, account identifiers, action inputs, and results | See applicable provider agreement |
| OpenPanel | Browser product analytics (consent-controlled); separately configured server events | Page views, feature usage, user and workspace identifiers, and technical metadata | European Union and United States |
| Sentry | Error and performance monitoring | Diagnostic and error data, including technical identifiers and signed-in account context | United States |
| Cloudflare | Network edge services (DNS, proxy, and content delivery) and R2 file storage | Request metadata such as IP addresses, uploaded documents, attachments, and stored application files | See applicable provider agreement |
| Stream (GetStream) | Realtime invoice comment and activity feeds where configured | Member identifiers and invoice feed activity | See applicable provider agreement |
| Storecove | E-invoice delivery over the Peppol network when you enable e-invoicing | Invoice content and sender and recipient business identifiers | See applicable provider agreement |
| logo.dev | Company logo lookup | Customer and vendor website domains | See applicable provider agreement |
| UserJot | Feedback and product updates where enabled | Signed-in user details, account context, and feedback submissions | See applicable provider agreement |
| Plain | Support conversations and optional live chat (marketing consent) | Contact and account details, messages, and support context | See applicable provider agreement |
| Loops | Customer contact synchronization and lifecycle communications | Email addresses, account and workspace attributes, and lifecycle events | See applicable provider agreement |
| Axiom | Operational telemetry where configured | Application traces, metrics, and diagnostic context | See applicable provider agreement |
| YouTube and Cloudflare Stream | Embedded learning videos (marketing consent) | Technical information and video playback interactions | See applicable provider agreement |
| Typesense | Search infrastructure (such as institution search) | Search queries and indexed metadata | United States and European Union |
We update this page when our sub-processors change. For questions about our sub-processors or to request prior notice of changes, contact us at [email protected].