Subprocessors
Last updated: May 16, 2026 (Effective date)
On this page
This page lists the subprocessors that Tyranno Apartment uses to operate the Servan service. We have a Data Processing Agreement (DPA) with each subprocessor under PIPA Article 26 and GDPR Article 28.
1. Subprocessor list
| Subprocessor | Processing Location | Function | Data Categories |
|---|---|---|---|
| Google Cloud Platform (Google LLC) | US / KR asia-northeast3 | Hosting, database, authentication, FCM push, storage | Account data, user content, metadata, logs |
| Vertex AI (Google LLC) | United States | Text embedding generation | User content (text) |
| Google Gemini API (Google LLC) | United States | KB draft generation, conflict detection, auto-approval | User content, context snippets |
| OpenAI, L.L.C. | United States | Auxiliary LLM processing (summarization, fallback embedding) | User content (on request) |
| Anthropic, PBC | United States | MCP tool-call LLM processing | MCP payloads, user content |
| Firebase (Google LLC) | United States | Authentication, Analytics, Crashlytics, Performance, FCM | Account IDs, device tokens, diagnostics |
| Stripe, Inc. | United States | Payment processing (Web Pro/Business) | Billing email, transaction IDs, subscription state |
| Apple Inc. | United States | Mobile IAP (iOS/macOS) | Subscription IDs, receipts |
| Google LLC (Google Play) | United States | Mobile IAP (Android) | Subscription IDs, receipts |
2. External integrations (not subprocessors — consent-based flows)
The services below exchange data only when you explicitly connect them, and are treated as user-authorized integrations rather than subprocessing. Data flows stop immediately upon disconnection.
- Slack Technologies (Slack messages, channels)
- Atlassian Pty Ltd (Jira issues, Confluence pages)
- GitHub, Inc. (repository events, PRs/issues)
- Notion Labs, Inc. (pages, databases)
3. Notice of subprocessor changes
We will update this page when subprocessors are added, changed, or removed and post a notice in-app or by email at least 30 days before the change takes effect. GDPR Data Subjects may object to a new subprocessor by emailing support@tyrannoapartment.com.
4. Safeguards
- DPA (or equivalent) with every subprocessor
- TLS 1.2 or higher in transit
- KMS-based at-rest encryption
- Verification of subprocessor security certifications (SOC 2, ISO 27001)
- Opt-out of public-model training where the LLM provider supports it
5. Contact
Email: support@tyrannoapartment.com
Note: This document is provided as general guidance. For specific legal advice, please consult a qualified attorney.