Draft, under legal review. This text may change before it takes effect.
Subprocessors
Draft of 5 November 2026
These companies process personal data for the Oort website and Oort Pro on behalf of Marcus Jonathan Ong (enskild firma, a Swedish sole trader). Transfers outside the EU rely on the EU Standard Contractual Clauses, or on the EU-US Data Privacy Framework where the company is certified.
- Cloudflare: hosting for the site and the Oort Pro relay, the databases (the early-access list, and accounts with key hashes and monthly counts), rate limiting, request logs without bodies, and, when switched on, cookieless Web Analytics.
- Clerk: sign-in and user accounts (email address, and name and picture if you sign in with GitHub or Google).
- Stripe: payments, subscriptions, tax, invoices and the billing portal.
- Brevo: the emails we send you, such as early-access news. It receives your email address. Hosted in the EU (France and Belgium).
- Voyage AI: embeddings and rerank for Oort Pro requests. It receives the text being saved or searched, in transit.
- TypeSafe: Jev decisions for Oort Pro requests. It receives the text being saved, in transit.
- Anthropic: Claude Haiku writes memories for Oort Pro requests. It receives the text being saved, in transit, and runs these requests in the United States only.
Voyage AI, TypeSafe and Anthropic only see requests you send with Oort Pro. With your own keys, the engine on your machine talks to them directly and we are not involved. We will update this list before adding another subprocessor. Questions: privacy@oortcloud.dev.