1. Scope
This page identifies third parties appointed by Neutron AI Ltd to Process Customer Personal Data as Subprocessors under the Data Processing Addendum. A provider is listed according to the role it performs for the current hosted architecture; a service shown here may not receive data for every customer or request.
“Customer Personal Data,” “Process,” and “Subprocessor” have the meanings in the DPA. Neutron remains responsible for its Subprocessors as stated there. Provider security, privacy, and downstream supplier information is available through the provider’s linked trust or legal resources.
2. Hosted-service Subprocessors
| Provider | Purpose and services | Data involved | Processing location |
|---|---|---|---|
| Cloudflare, Inc. Privacy and data protection | Core hosting and delivery through Cloudflare Workers and static assets; Durable Objects and D1 relational storage; R2 object storage; Vectorize semantic indexing; Queues; Workers AI embeddings and authorised inference; transactional email delivery bindings; network security; and operational observability. | Customer Content and embeddings, account and workspace identifiers, authentication and transactional-email data, request and network metadata, configuration, usage, security, audit, and diagnostic data as required by the invoked feature. | Global edge and storage infrastructure, including the United States and locations selected or used according to Cloudflare service configuration. Transfer safeguards are described in the DPA and Cloudflare’s data-processing terms. |
Cloudflare may use its own authorised subprocessors to deliver these services. Cloudflare’s current list and transfer information apply as part of its contract with Neutron. A customer-specific regional preference is not a legal residency commitment unless an Order expressly provides one.
3. Other important providers
| Provider | Role and purpose | Data involved |
|---|---|---|
| Stripe group entities Stripe Privacy Center | Payment processing, subscriptions, checkout, customer billing portal, tax and fraud controls, refunds, and transaction records. Stripe may act as an independent Controller for payment data and as a service provider for specified processing under its own terms. Stripe is not used to process memory content. | Billing contact, payment-provider customer and transaction identifiers, plan, amount, currency, status, tax and fraud signals, and payment details entered directly into Stripe. Neutron does not intend to receive full card numbers. |
Providers that act only on Neutron’s own Controller data—such as professional advisers, corporate banking, or internal business administration—are governed by the Privacy Notice and are not Subprocessors of Customer Content merely because Neutron uses them.
4. Customer-selected integrations and model providers
A provider, repository, agent framework, model gateway, MCP client, tool, or application that a customer selects and instructs Neutron to connect to is ordinarily the customer’s provider, not a Neutron-appointed Subprocessor. The customer is responsible for evaluating that provider, establishing a lawful basis and transfer mechanism, controlling credentials and permissions, and complying with its terms.
Neutron’s hosted embedding and authorised model-inference path is delivered through Cloudflare Workers AI and is covered by the Cloudflare entry above. If Neutron later appoints a separate model provider that can Process Customer Personal Data on Neutron’s behalf, it will be added to this list before that Processing begins.
5. Changes, notice, and objections
Neutron will update this page before a new Subprocessor begins Processing Customer Personal Data and will provide at least 15 days’ advance notice through this page, the Service, or account email where practicable. Customers that need direct notice should contact admin@neutronai.dev from an account administrator address.
A customer may object during the notice period on reasonable, documented data-protection grounds by identifying the affected data and concern. Neutron and the customer will seek a commercially reasonable alternative. If none is available, the affected Service may be terminated as described in the DPA. General preference, cost, or competitive concerns are not data-protection grounds.
Contact and company information
Questions about this document may be sent to admin@neutronai.dev.
Neutron AI LtdRegistered in England and Wales under company number 17317740
Registered office: 5 Hallett Close, Havant, United Kingdom, PO9 2BW