Subprocessors
Last updated: 2026-10-21
neesh Inc. uses the following third-party services ("sub-processors") to deliver AskBase. Each sub-processor has been assessed for data handling practices. We will provide 30 days notice via email before adding a new sub-processor that processes personal data.
- AWS (Amazon Web Services)
- Purpose: Cloud hosting, database, file storage, message queuing, authentication
infrastructure.
Data categories: All customer data at rest and in transit.
Location: us-east-1 (United States). - Cognito (subset of AWS)
- Purpose: User authentication and identity management.
Data categories: Email addresses, hashed credentials, session tokens.
Location: us-east-1 (United States). - Anthropic
- Purpose: AI inference for document summarisation, query answering, and onboarding
assistance (Claude models).
Data categories: Query text, document excerpts passed as context.
Location: United States. - OpenAI
- Purpose: Text embedding generation for semantic search.
Data categories: Document text and query text used to generate vector embeddings.
Location: United States. - Stripe
- Purpose: Payment processing and subscription management.
Data categories: Billing contact name, email, payment method metadata (card last 4, expiry). Full card numbers are never stored by neesh Inc.
Location: United States. - Twilio
- Purpose: Voice interface telephony (when voice features are enabled for your organisation).
Data categories: Phone numbers, voice audio transcripts.
Location: United States. - Deepgram
- Purpose: Speech-to-text transcription for the voice interface.
Data categories: Voice audio recordings.
Location: United States. - ElevenLabs
- Purpose: Text-to-speech synthesis for voice interface responses.
Data categories: Answer text converted to audio.
Location: United States. - Sentry
- Purpose: Error monitoring and performance tracking.
Data categories: Anonymised stack traces and error metadata. PII is scrubbed before transmission.
Location: United States. - neesh Inc.
- Purpose: Product development, support, and operations.
Data categories: All categories as data controller and processor.
Location: Canada.
This website (neeshinc.ca)
Visiting neeshinc.ca does not involve any service on the list above. Two third parties are involved: Cloudflare, which hosts the site and receives mail sent to our address, and Cal.com, on the contact page only.
- Cloudflare
- Purpose: Hosting and content delivery: every page and file of this website is
served to you by Cloudflare, Inc. Also email: messages you send to hi@neeshinc.ca, including through
the mail links on this site, are received by Cloudflare Email Routing and forwarded to our own
inbox. Nothing is sent until you send it from your own mail program.
Data categories: What any web host receives with each request: your IP address, the address of the page you ask for, the page you came from, your browser's user agent, and connection details such as the TLS version. We have not switched on Cloudflare's analytics, so it sets no analytics cookie; it may set a short-lived security cookie if it has to challenge a visitor it considers suspicious. For email: your email address, your name if your mail program includes it, the message and anything you attach.
Retention: Set by Cloudflare's privacy policy. Email Routing forwards messages and does not keep a copy in a Cloudflare mailbox.
Location: Cloudflare's global network; Cloudflare stores this information primarily in the United States and the European Economic Area. - Cal.com
- Purpose: The booking calendar shown on our contact page, used to schedule the
free assessment call. It is a Cal.com page displayed inside ours, loaded on that page only and
run by Cal, Inc.
Data categories: When the contact page loads the calendar, your browser requests it from Cal.com, which receives your IP address, the page you came from, your browser's user agent, and any cookies Cal.com sets from its own domain. When you book, it also receives your name, your email address, the time you select and anything you type into the booking form. If you never open the contact page, Cal.com receives nothing.
Retention: Bookings stay in our Cal.com account until we delete them, which we will do if you ask. Cal.com's own retention of request data is set in its privacy policy.
Location: United States (Cal, Inc.).
We run no analytics. Google Analytics was removed from this site in September 2026 and nothing replaced it, so no analytics script loads and no analytics cookie is set. The request details Cloudflare receives, above, are what hosting a website involves, not analytics we run. If we adopt a cookieless analytics tool, it will appear on this list before it is switched on.
Requesting attestations
Customers can request our security questionnaire response and AWS Artifact-derived sub-processor attestations by contacting hi@neeshinc.ca.
Contact
neesh Inc. · Canada
hi@neeshinc.ca