Sub-processors
Third Vector Advisory B.V. uses the sub-processors below to process personal data on behalf of its clients, under our Data Processing Agreement. This page is Annex 3 of that agreement.
Last updated 29 September 2026
| Sub-processor | Entity | What it does for us | Where data is processed | Transfer safeguard |
|---|---|---|---|---|
| Anthropic | Anthropic Ireland, Limited | Claude models, used to analyse client materials and build Custom Skills | Stored in the United States; requests may be routed through the US, Europe, Asia and Australia | Standard contractual clauses, Modules 2 and 3 |
| Google Cloud EMEA Limited, Ireland | Google Workspace: file storage, email, and Meet calls, recordings and transcripts | Google’s global infrastructure | Standard contractual clauses, or an alternative transfer solution Google adopts | |
| Linear | Linear Orbit, Inc. | Tracking development work on Custom Skills | European Union | Standard contractual clauses, Modules 2 and 3 |
| Microsoft | Microsoft B.V. | Microsoft Teams calls, and any recordings or transcripts of them | EU Data Boundary | Microsoft Products and Services Data Protection Addendum |
| Notion | Notion Labs, Inc. | Client project pages, meeting notes and task tracking | United States | Standard contractual clauses |
| Slack | Slack Technologies Limited, Ireland | Private channels for conversations with client teams | Slack’s global infrastructure | Standard contractual clauses and the EU-US Data Privacy Framework |
Changes. Before we add or replace a sub-processor, we tell clients whose personal data we process by email at least 14 days before it first processes their data, and we update this page (section 5.2 of the DPA). Clients may object under section 5.3.
Your own AI provider. When Canopy Nodes run in your own environment, the AI provider you choose works for you under your own contract and is not on this list (section 3.5 of the DPA).
Questions: legal@thirdvector.io.