SUBPROCESSOR REGISTER

Every vendor that touches
client data, named.

The privacy notice commits to publishing this. Here it is, generated from the register held inside the platform.

Read the privacy notice Read the Trust page

Current subprocessors

A subprocessor is any vendor that processes, transmits or stores data on behalf of a client. Vendors used only for internal operations, and which never touch client programme data, are not listed.

VENDOR
PURPOSE
DATA
PROCESSING LOCATION
CloudflareHosting and edge
Serves this site and runs the platform worker.
Request metadata. No programme records.
Global edge
Microsoft 365Business tenant
Correspondence and document storage for the operating entity.
Business contact details, correspondence.
EU and US
AirtableProgramme record
Holds the programme record, readings and gate decisions.
Programme data, scores, gate decisions.
US
SoftrClient portal
Hosts platform.aichangeloop.com, the signed-in client portal.
Portal user accounts and the programme views those users are assigned to.
EU
TallyForm intake
Structured intake where a form is used rather than direct correspondence.
Business contact details, intake responses.
EU
AnthropicModel provider
Generates report narrative from measured scores. Never generates a number.
De-identified scores and layer readings.
US
ResendTransactional email
Sends the single confirmation email after a free diagnostic registration.
Recipient email address and the content of that one message. No tracking.
US
PayhipStorefront
Hosts checkout and delivery for the practitioner guides sold by Evolevant LLC. Card payments are processed by Stripe.
Buyer name, email, transaction record.
EU and US
MakeIntake automation
Carries form intake responses from Tally into the programme record, and runs the nightly platform health check.
Business contact details and intake responses, in transit only. The health check uses test profiles, not client data.
US

Payment card details are never seen or stored by AI Change Loop. Checkout is handled entirely by the storefront. Protected health information, patient identifiable data and regulated clinical data are excluded from the platform by control, not by policy alone.

The rest of the commitments

What is collected, how long it is held, and how deletion works, are set out in full.

Read the privacy notice
OR READ THE THINKING

Loop Insights

Framework implementation, the Orien case work, and the questions worth putting to a steering committee. Published openly.

Read the insights