AerodesignAI

Subprocessors

Last updated: April 26, 2026

Third-party providers that may process personal data for the Aerodesign AI control plane. Customer-plane engineering content is designed to remain in the customer environment unless a customer explicitly configures otherwise.
Provider
Vercel
Purpose: Control plane hosting, deployment, edge delivery, and operational security services.
Data: Account metadata, application logs, and control-plane traffic required to provide the hosted service.
Location: United States / global infrastructure, with region configuration where available.
Safeguards: DPA, contractual safeguards, security controls, and transfer safeguards where applicable.
Supabase
Purpose: Authentication, tenant metadata, application database, and managed PostgreSQL infrastructure.
Data: User accounts, tenant records, admin configuration, invite records, and demo requests.
Location: Project region configured by Aerodesign AI.
Safeguards: DPA, contractual safeguards, regional hosting configuration, and transfer safeguards where applicable.
Resend
Purpose: Optional transactional email delivery for invites, notifications, and demo request routing.
Data: Email address, message metadata, and message content necessary to deliver email.
Location: United States / global infrastructure.
Safeguards: Used only when email delivery is configured. DPA and transfer safeguards should be reviewed before production use.
Amazon Web Services
Purpose: Optional private storage for connector desktop installers and signed download artifacts.
Data: Installer artifacts, download metadata, and storage access logs.
Location: Configured bucket region.
Safeguards: Private buckets, signed URLs, IAM access controls, and regional configuration.

Customer-configured providers

Customers may connect local databases, file shares, LLM runtimes, or other systems through their customer-plane connector. Those systems are selected and controlled by the customer and are not automatically subprocessors of the Aerodesign AI control plane.

Change notices

Material updates to this list should be reviewed before production use and communicated under the applicable customer agreement or DPA. See the Privacy Policy for the broader processing notice.