Sub-Processors共生
Version 1.0 — Last Updated: 2026.07.23
Sub-processors
This page lists the third-party service providers ("sub-processors") that Takara.AI Ltd ("Takara") engages to process personal data. It is referenced by, and forms part of, the Data Processing Agreement incorporated into our API Terms of Service (https://takara.ai/api-terms) and supplements Section 7 of our Data Privacy Policy (https://takara.ai/legal/privacy-policy).
We maintain a Data Processing Agreement with each provider listed below, and appropriate safeguards (UK IDTA or the UK Addendum to the EU Standard Contractual Clauses) are in place for any transfers of personal data outside the UK/EEA.
1. Sub-processors for Customer Data (API Service)
These providers are engaged in the processing of Customer Data — text submitted to the Embedding API and the vectors returned. Customer Data is processed transiently in volatile memory only, and is never stored, logged, or cached by Takara or any sub-processor.
Sub-processor | Purpose | Location | Data retained |
|---|---|---|---|
Amazon Web Services, Inc. | Cloud infrastructure on which the API Service runs | Supported AWS regions (see below) | None — transient processing only |
This is the complete list. No other provider has access to Customer Data in any form.
Requests to the API Service are routed automatically among the following regions for performance and availability, and Customer Data may be processed transiently in any of them:
United Kingdom: London (eu-west-2)
EEA: Ireland (eu-west-1), Frankfurt (eu-central-1), Paris (eu-west-3), Milan (eu-south-1), Stockholm (eu-north-1)
UK adequacy jurisdictions: Canada (ca-central-1), Tokyo (ap-northeast-1), Osaka (ap-northeast-3), Seoul (ap-northeast-2)
United States: (UK–US Data Bridge / UK Addendum to EU SCCs): N. Virginia (us-east-1), Ohio (us-east-2), N. California (us-west-1), Oregon (us-west-2)
Other: (UK IDTA / UK Addendum to EU SCCs): Mumbai (ap-south-1), São Paulo (sa-east-1), Singapore (ap-southeast-1), Sydney (ap-southeast-2), Cape Town (af-south-1)
Data in transit may be routed through AWS global edge infrastructure, encrypted with TLS 1.2+; no Customer Data is stored at edge locations.
2. Service providers for account, billing, and support data
These providers process account-related personal data (registration, authentication, billing, usage, and support information) for which Takara is the Data Controller. This processing is governed by our Data Privacy Policy, not the API Data Processing Agreement.
Provider | Purpose | Location |
|---|---|---|
Amazon Web Services, Inc. | Cloud hosting of account and platform systems | United Kingdom and EEA only. |
Clerk, Inc. | Account authentication and user management for the dashboard | United States |
Stripe, Inc. | Payment processing | United States |
Google LLC | Website analytics (Google Analytics, Google Tag Manager) | United States |
Monday.com Ltd | Email communications | United States |
Notion Labs, Inc. | Internal documentation and support workflows | United States |
Microsoft Corporation | Support communications | EU / UK (with possible US transfers) |
Slack Technologies, LLC | Support communications | United States |
GitHub, Inc. | Code and CI/CD pipeline management | United States |
Changes to this list
We will provide at least 30 days' notice before adding or replacing a sub-processor that processes Customer Data, by updating this page and notifying API customers by email or account notification, in accordance with Section 7 of the Data Processing Agreement. Customers may object to a change on reasonable data protection grounds within 14 days of notice.
Changes to the providers in Section 2 are made in accordance with our Data Privacy Policy.