Cygent Sub-processors
Last updated: April 28, 2026
This page lists the third-party Sub-processors that Cyfrin Inc ("Company", "We", "Us", or "Our") engages to provide infrastructure, inference, and operational services for the Cygent platform (the "Service"). It supplements Section 6.1 of the Cygent Privacy Policy and the Cygent Data Processing Agreement.
We require each Sub-processor to be bound by data protection obligations no less protective than those in Our Privacy Policy and the DPA.
Current Sub-processors
| Category | Sub-processor | Purpose | Location |
|---|---|---|---|
| Cloud infrastructure — Instances | OVHcloud | Hosting of per-Organization Instances, Orchestrator, and agent containers | United States |
| Cloud infrastructure — Platform | Vercel Inc. | Hosting of the Cygent control-plane web application | United States |
| Managed database | PlanetScale, Inc. | PostgreSQL hosting for platform and agent data | United States |
| LLM aggregation | OpenRouter, Inc. | Routing of inference requests | United States |
| LLM inference (via OpenRouter) | Anthropic, PBC | Inference using Claude model family | United States |
| LLM inference (via OpenRouter) | OpenAI, L.L.C. | Inference using GPT-5 model family; embeddings | United States |
| LLM inference (via OpenRouter) | Moonshot AI | Inference using Kimi K2.5 (only when Customer opts in) | Varies |
| Authentication — OAuth | GitHub, Inc.; Google LLC | OAuth identity providers (only engaged where You choose to sign in via these providers rather than email/password) | United States |
| Compromised-password screening | Have I Been Pwned (Pwned Passwords API, operated by Superlative Enterprises Pty Ltd) | Screening of new and reset passwords against known breach corpora using k-anonymity (only the first 5 characters of the SHA-1 hash of a candidate password are transmitted; the password itself is not sent or stored) | Australia / United States |
| Transactional email | Resend, Inc. | Account and Service notifications, including email verification, password reset, two-factor enrollment, and security alerts | United States |
| Observability / logging | Vercel Inc. | Application and runtime logs | United States |
| Meeting-bot recording | Recall.ai, Inc. | Optional meeting capture (only when enabled) | United States |
| Third-Party Integrations | GitHub, Slack, Discord, Telegram | Only where You choose to connect them | Varies by provider |
Changes to This List
We may update this list as We add, remove, or replace Sub-processors. The "Last updated" date above reflects the most recent change. Customers on an enterprise plan may subscribe to advance notice of Sub-processor changes as set out in the DPA.
Contact
Questions about Our Sub-processors can be directed to support@cyfrin.io.