Trust
Subprocessors
Last updated: July 2026
To provide the Consystence platform we use a small number of third-party service providers ("subprocessors") that may process personal information on our behalf. This page lists them, what they do, the data they handle, and where they operate. It is the canonical register referenced by our Privacy Policy and any Data Processing Agreement.
| Subprocessor | Purpose | Personal data processed | Primary location |
|---|---|---|---|
| Microsoft Azure | Cloud hosting for the platform and customer tenant data | All platform data — account records, tenant data, provenance historian, and operational records | Australia (Azure Australia East) |
| Microsoft Entra External ID | Authentication and identity (sign-in at id.consystence.com) | Account identifier, email address, and authentication events | Microsoft global identity infrastructure |
| Amazon Web Services (Bedrock) | AI model inference for the advisory tier | Prompt content — operator messages, site/organisation identifiers, and live plant state (processed for inference, not retained by us) | Australia (AWS Asia Pacific — Sydney ap-southeast-2; inference may route within Australia to Melbourne ap-southeast-4) |
| Anthropic | AI models (Claude) | Prompt content, served via AWS Bedrock in Australia. A direct Anthropic US API path exists but is disabled by default in production; it processes prompt content only where a tenant explicitly enables it. | Australia (via Bedrock); United States (direct API, only if enabled) |
| Stripe | Payment processing for subscriptions | Billing email address and customer/subscription identifiers. We never receive or store card numbers. | United States (global processing) |
| Cloudflare | DNS, content delivery, website hosting and security, and cookieless web analytics | Website request metadata and aggregate, non-identifying analytics | Global edge network (aggregate analytics may be processed in the United States) |
| Resend | Transactional email delivery for website enquiries | The name, email address, and message you submit through the contact form | United States |
Data residency
Customer platform data is hosted in Azure Australia East, and production AI inference runs on AWS Bedrock in Australia — anchored in Sydney, with routing constrained to Australian regions — so both your platform data and your prompt content are processed in Australia by default. The disclosed cross-border flows are billing (Stripe), website contact-form email (Resend), Cloudflare's global network with aggregate analytics, Microsoft identity services, and Anthropic's US API only where a tenant explicitly enables that path. Under Australian Privacy Principle 8 we take reasonable steps to ensure overseas recipients handle personal information consistently with the APPs. See ourSecurity & data residency page for the full picture.
Changes
We keep this page current and update the date above when the register changes. Platform customers on a Data Processing Agreement receive advance notice of new or changed subprocessors as set out in that agreement. To be notified of changes, or for questions about a specific provider, contactprivacy@consystence.com.