Data Processing Addendum

This page describes the status of our Data Processing Addendum (DPA). Like our Privacy Policy and Terms of Service, the DPA is still in preparation and is not yet a finalised legal commitment.

Our role

TerraBrains operates as a data processor on behalf of customers (the data controllers) for the personal data they upload, log, or generate inside their tenant. A formal DPA covering this relationship is being prepared.

Sub-processors

We rely on a small number of trusted infrastructure providers, each processing data only to deliver their part of the platform:

• Supabase — managed PostgreSQL database, authentication and file storage.
• Amazon Web Services (AWS) — hosting and AWS Bedrock AI inference, run in the tenant’s designated AWS region.
• Vercel — web application delivery and hosting.
• Dodo Payments — merchant-of-record for global subscription billing and tax (worldwide payments, currency and tax).
• Resend — transactional email (sign-in, billing and security notices).

Customer data is never used to train third-party AI models. This list mirrors the sub-processors named in our Privacy Policy and will be kept current as part of the finalised DPA.

Request the DPA

If you need a DPA for procurement or a data-protection review, email legal@terrabrains.ai and we will share the current draft and work through any terms you require.