Last updated: 5 June 2026
This page lists every external sub-processor HARRIS engages in production, what they process, where, and under which data-processing instrument. It is the maintained companion to section 9 of our Privacy Policy and is generated from a single source-of-truth list in our codebase, so the page cannot drift from the list of providers our agents actually call.
Sub-processors are grouped by whether they are always engaged (the platform cannot run without them) or optional (engaged only when you connect that provider per website). For each entry we name the legal entity, summarise the purpose, enumerate the data categories that flow to that processor, identify the primary processing location, and state which data-processing instrument we rely on.
These providers process data for every HARRIS customer as a condition of running the platform. Disconnecting from them is not possible without ending your use of the service.
Edge runtime (Workers), database (D1), object storage (R2), key-value cache (KV), Durable Objects, Workers AI, Vectorize. The platform runs entirely on Cloudflare; every HARRIS request is served from a Cloudflare data centre.
Data categories:
Processing location: Global edge network; primary data residence configurable, default global
DPA / instrument: Cloudflare Data Processing Addendum (incorporating EU SCCs + UK IDTA)
Primary large-language-model provider (Claude family). Powers conductor turns, content generation, planning, and most agent reasoning.
Data categories:
Processing location: United States
DPA / instrument: Anthropic API Commercial Terms + Data Processing Addendum (EU SCCs + UK Addendum). API inputs/outputs are contractually excluded from model training.
Secondary LLM for specialised tasks (GPT-4o, GPT-4o-mini) and image generation (GPT-Image).
Data categories:
Processing location: United States
DPA / instrument: OpenAI Data Processing Addendum (EU SCCs + UK Addendum). API inputs are contractually excluded from model training.
Web research queries for market-research and competitive-intel tasks. Used by research-tier agents; no personal data is sent.
Data categories:
Processing location: United States
DPA / instrument: Perplexity API Terms; standard contractual clauses on file for EEA/UK transfers.
Image generation provider used alongside GPT-Image and Workers AI Flux for marketing imagery.
Data categories:
Processing location: United States
DPA / instrument: Ideogram API Terms; standard contractual clauses on file for EEA/UK transfers.
These providers process data only when you actively connect them via Settings > Connections for a specific website. No data flows to them until that connection is established, and revoking the connection ends the flow. Your credentials are encrypted at rest with AES-256-GCM and deleted when you disconnect.
Engaged only when a customer connects a Facebook / Instagram account per website. Used to read Page + Ad Account insights and publish content / manage ad campaigns the customer has authorised.
Data categories:
Processing location: United States (Meta) — data flow is to Meta's APIs, not the other way
DPA / instrument: Meta Platform Terms (developer terms) + Limited Use / data-deletion-callback registered. Tokens revocable at any time via Settings → Connections.
Engaged only when a customer connects a Google account per website. Gmail (restricted scope gmail.modify + gmail.labels) for inbox triage; Search Console (read) for SEO data; Google Ads (campaign read; writes pending basic-access upgrade); YouTube (channel read-only).
Data categories:
Processing location: United States and global Google data centres
DPA / instrument: Google API Services User Data Policy (incl. Limited Use for Gmail), CASA Tier-2 assessment for Gmail restricted scope (annual). Standard contractual clauses for EEA/UK transfers on Google's side.
Engaged only when a customer connects a TikTok creator account. Content Posting + Display APIs are used to publish videos and read public account data.
Data categories:
Processing location: Singapore (TikTok Pte. Ltd.) with regional data centres
DPA / instrument: TikTok for Developers Terms of Service; standard contractual clauses on file for EEA/UK transfers.
Engaged only when a customer pastes a per-store custom-app admin API token. Read-only Admin API access to product / order / customer data for the connected store; optional orders/create webhook into project activity.
Data categories:
Processing location: Canada (Shopify Inc.) with global edge
DPA / instrument: Shopify Partner Program / Admin API Terms; the custom-app token is revoked the moment the merchant uninstalls the custom app.
Engaged only when a customer connects a Stripe account with a read-only restricted key, for revenue summaries (MRR snapshots, recent invoices). HARRIS does not move money on Stripe.
Data categories:
Processing location: Ireland (Stripe Payments Europe, Ltd.) and United States (Stripe, Inc.)
DPA / instrument: Stripe Services Agreement + DPA (EU SCCs + UK Addendum).
Engaged only when a customer connects a Beehiiv publication. Used for read-side subscriber stats and recent-post performance.
Data categories:
Processing location: United States
DPA / instrument: Beehiiv API Terms; standard contractual clauses on file for EEA/UK transfers.
Engaged only when a customer configures a Discord channel webhook URL. HARRIS sends outbound notifications via that webhook; no inbound Discord data is read.
Data categories:
Processing location: United States
DPA / instrument: Discord Developer Terms of Service.
Engaged only when a customer connects a Telegram bot. Used for inbound + outbound project notifications between HARRIS agents and the chat user. The webhook is gated by a per-bot header secret.
Data categories:
Processing location: Multi-jurisdictional (Telegram operating company)
DPA / instrument: Telegram Bot API Terms of Service. Per-bot webhook secret rotated on disconnect.
We notify active customers by email at least 30 days before a material change to the always-engaged set takes effect, so that you (and where you act as a controller, your end-customers) have a meaningful window to assess and, if necessary, object. Adding a new optional connector is informational rather than material, since it does not change processing for customers who have not connected it. Material removals (a provider leaving the always-engaged set) are announced on the same window.
You can subscribe to receive these notifications by emailing dpo@harrishq.ai with the subject line "Sub-processor notifications".
Most of our always-engaged sub-processors operate in the United States. For transfers from the EEA we rely on the European Commission's Standard Contractual Clauses (2021 modules) and for transfers from the United Kingdom on the UK International Data Transfer Addendum (UK IDTA) or the equivalent UK Addendum to the EU SCCs issued by the ICO. See section 11 of the Privacy Policy for the full framing.
If you are a HARRIS customer and need a copy of a specific sub-processor DPA, have a question about a provider on this list, or want to object to a planned change, contact our Data Protection Officer at dpo@harrishq.ai. Where you act as a controller for your own end-customers, you may forward this list to satisfy your own Art 28 disclosure duties.