Sub-processors
Every outside provider that may process personal data for Aspian Cloud, what it does, and the country where it processes that data.
What stays in your cell
Application databases, volumes, backups, logs, build artefacts and audit records stay in the cell you choose. Aspian Alliance operates the cell. A cell in a partner facility lists the facility on your Trust Page as attested by that partner, never as platform-verified.
Providers outside the cell
"In use" means the provider handles data today. "On enablement" means it will handle data only once that channel or feature is switched on for your workspace; we will mark it in use before that happens.
| Provider | What it does | Where it processes data | Status | Provider’s own page |
|---|---|---|---|---|
| Vercel | Hosts the cloud.aspianalliance.com website and its sign-up and contact forms | Mainly the United States (on AWS, Azure and Google Cloud) | In use | Source |
| Resend | Sends sign-up and contact form messages to our inbox | United States | In use | Source |
| Microsoft 365 (Exchange Online) | Our staff email, which receives form messages and support requests | The data location of our Microsoft 365 tenant, shown in its admin centre | In use | Source |
| GitHub | Source repositories you connect, read at build time | Mainly the United States | On enablement | Source |
| Meta (WhatsApp Business Cloud API) | WhatsApp alerts and approval requests | Meta data centres outside Nigeria. Meta’s optional local storage does not include Nigeria | On enablement | Source |
| Termii | SMS fallback for alerts in Nigeria | Not stated by the provider. Termii commits to the NDPA 2023 | On enablement | Source |
| Africa’s Talking | SMS and voice fallback for alerts | Not stated by the provider. The operating company is in Kenya | On enablement | Source |
| Paystack | Naira payments by card, bank transfer or virtual account | Ireland (AWS) | On enablement | Source |
| Flutterwave | Naira payments, as an alternative to Paystack | Nigeria and the countries where Flutterwave operates | On enablement | Source |
| Stripe | Sterling card payments | United States and India | On enablement | Source |
Minimal content for Nigerian organisations
For workspaces in Lagos or Abuja, WhatsApp, SMS and email messages carry only a reference code and a secure link. The details open after sign-in, inside the cell. Delivery and acknowledgement are reported separately: a delivery receipt shows the message arrived, not that a person read it.
AI agents you connect
If you connect an AI coding agent, what it reads goes to that agent’s model provider. That provider is your choice and your sub-processor, not ours. Agents only see what their risk class allows, and never see secret values.
Changes to this list
We email the workspace owner 30 days before a new provider starts processing personal data, and update this page and its date. You can object, as the Data Processing Agreement explains.