Prism IO™ (PopTech Studio LLC) uses the following third parties to help provide the Services. “Customer Content” means the brand materials, prompts, files and Brand Identity System™ content a customer provides or that is produced for them. “Account data” means identity, billing and usage information about the customer’s own users.
Subprocessors that may receive Customer Content
| Provider | Service | Location of processing | Data | Safeguard for EU/UK data |
|---|---|---|---|---|
| Hostinger International Ltd. | Virtual private server hosting for the API, database, MCP server and file storage; backups | Boston, Massachusetts, USA | All Customer Content and account data | Provider terms, with standard contractual clauses where applicable |
| OpenAI, L.L.C. | Large language model and embedding API (primary) | USA | Prompts, chat messages, extracted file text, brand model excerpts, retrieved public brand content | Business API terms (no training); provider data processing terms |
| Anthropic, PBC | Large language model API (fallback and high-fidelity tasks) | USA | Same as OpenAI, when routed | Commercial terms (no training); provider data processing terms |
| Perplexity AI, Inc. | Search-augmented model API for research and assessment tasks | USA | Same as OpenAI, when routed | Commercial API terms; provider data processing terms |
| ElevenLabs, Inc. | Voice session transcription and synthesis, only when a customer uses a voice feature marked as such | USA | Microphone audio and transcript for the session | Provider terms; feature is currently not enabled |
Prism IO™ is model-agnostic. Requests are routed through a provider-neutral layer, so additional AI model providers, including providers of open-source models, may be added over time. A new provider is added to this list, and customers with a Data Processing Addendum are notified, before it receives Customer Content.
Subprocessors that receive account data only
| Provider | Service | Location | Data |
|---|---|---|---|
| Hostinger International Ltd. | Managed WordPress hosting and CDN for prismio.ai; SMTP relay for transactional email | Hostinger data centers; CDN edges worldwide | Website account data, Brand Audit registration details, contents of emails we send |
| Stripe, Inc. | Payment processing and subscription billing | USA | Billing name, email, payment method, transaction records |
| Google LLC | Google Analytics 4, Google Tag Manager, Google Fonts on prismio.ai | USA | Website usage data, IP address, browser data |
| HubSpot, Inc. | Website analytics and CRM on prismio.ai, including form submissions | USA | Visit data and details submitted in prismio.ai forms |
| PostHog, Inc. | Product analytics for the dashboard, where enabled | USA | Sign-in, sign-up and feature events tied to an account identifier |
| Functional Software, Inc. (Sentry) | Error monitoring, where enabled | USA | Error reports with technical context; secrets scrubbed |
| Zoom Video Communications, Inc. | Video meetings for brand reviews, onboarding and support | USA | Name, email, meeting details; recording where announced and agreed |
| Fireflies.ai Corp. | Meeting recording, transcription and notes, only where announced and agreed | USA | Meeting audio, transcript and summary |
| Meta Platforms, Inc. | Meta Pixel on prismio.ai, where enabled, for advertising measurement | USA | Browser and device data, pages viewed, site actions; opt-out available under “Your Privacy Choices” |
Infrastructure we operate ourselves (not third parties)
| Component | Notes |
|---|---|
| n8n workflow automation | Self-hosted on our own infrastructure. Handles wait list entries and notifications. No third-party processor involved |
| Redis | Runs on our own server. Holds short-lived rate-limit counters and one-time token identifiers only |
| PostgreSQL | Runs on our own server. System of record |
Not in the data path
Cloudflare is not currently used for prismio.ai, app.prismio.ai, api.prismio.ai or mcp.prismio.ai. If the planned DNS move places the website behind Cloudflare’s proxy, Cloudflare, Inc. will be added to the account-data table before the change is made.
Change log
| Date | Change |
|---|---|
| 2026-09-22 | Initial list compiled from the deployed configuration |
Prism IO™, Brand System Architect™, BrandOS™, Brand Identity Operating System™ and Brand Identity System™ are trademarks of PopTech Studio LLC. This document was last updated on September 22, 2026. Prior versions are available on request.