Subprocessors
Last updated:
Bruno engages a small number of trusted vendors to help operate the Service. This page lists the current authorised subprocessors. We update this list when the vendor mix changes; customers receive at least 30 days' prior notice of any new subprocessor and may object on reasonable data-protection grounds (see our DPA).
How to subscribe to changes
Email help@bruno.support with subject "Subscribe to subprocessor changes" and we'll add you to the notice list at no cost.
Current subprocessors
| Vendor | Purpose | Data processed | Region |
|---|---|---|---|
| OpenRouter | LLM inference and embeddings (the model gateway used by Bruno's AI core). | Conversation messages, retrieved knowledge passages, page-context summaries. | United States |
| Stripe | Subscription billing and top-ups. | Customer billing details, payment-method tokens, invoices. | US, EU |
| Hosting provider | Compute, networking, and managed database / cache services for the API and worker. | All Service data at rest and in transit (encrypted). | United States |
| Managed object storage | Storage for uploaded knowledge files. | Customer-uploaded PDFs, markdown, text files. | United States |
| Email provider (transactional) | Account, billing, and security emails. | Recipient email addresses, message contents. | United States |
| Error tracking | Application error and performance monitoring. | Stack traces, request metadata. Visitor and customer content is redacted before transport. | United States |
What this list is and isn't
- It lists vendors who may process customer or visitor personal data on our behalf.
- It does not list infrastructure providers used solely for our own internal operations (for example, code hosting, internal analytics, payroll), where customer or visitor data is not processed.
- Where a vendor is region-pinned by configuration, the region above reflects the production deployment in use today.
Data sub-processing chain
Each of the above vendors may use their own subprocessors (e.g., model providers behind OpenRouter, payment-acquirer banks behind Stripe). We rely on the vendor's published lists and contractual obligations to ensure that protection flows down through the chain.
Contact
Questions about a specific vendor or region? Email help@bruno.support with subject "Subprocessors question".