Sub-processors
Last updated: 12 April 2026
Overview
Agrianta uses a small number of carefully selected third-party service providers ("sub-processors") to help us deliver the Services described in our Terms of Service. Each sub-processor is bound by a written contract requiring them to protect personal data to a standard equivalent to our own, and each is used for a single, specific purpose.
This page lists every sub-processor that may receive personal data you or your team members upload, generate, or trigger through the platform. It does not list public data sources we read from (for example, public weather APIs) or first-party infrastructure we operate ourselves.
Current Sub-processors
| Provider | Location | Purpose | Data Processed |
|---|---|---|---|
| Stripe | United States | Payment processing | Payment method, invoices, customer name and email, billing address. Card data is handled directly between your browser and Stripe and never reaches our servers. |
| Zitadel | United Kingdom / EEA (self-hosted) | Authentication and identity | Email address, password hash, name, role claims, organisation membership. |
| Sentry | Germany | Error monitoring | Error stack traces, request URLs, user ID, organisation ID. Used to diagnose and fix platform issues. |
| Resend | United States | Transactional email | Recipient email address and message content for invites, receipts, verification, and service notifications. |
| PostHog | European Union (eu.i.posthog.com) | Product analytics | Organisation ID, farm IDs, subscription tier, feature usage events, and anonymised interaction data. We do not send user names or email addresses to PostHog. |
| OpenAI | United States | Scout AI chat, Q&A, and retrieval-augmented generation (including indexing your farm records as embeddings) | User chat prompts and relevant farm and livestock context sent to the chat endpoint, plus selected farm records (such as animal medical records, insights, and inventory entries) sent to the embeddings endpoint so your data can be searched by Scout AI. Original text is not retained by OpenAI after inference or embedding. We use API tiers that do not use your inputs to train OpenAI's foundation models. |
| Anthropic | United States | Livestock image recognition (Claude Vision) | Livestock photographs you upload for ear-tag or passport scanning. Images are transmitted for inference and are not retained by Anthropic. We use API tiers that do not use your inputs to train Anthropic's foundation models. |
| Livestock Information Service (LIS) | United Kingdom (government) | Statutory animal movement reporting, via your OAuth consent | CPH number, animal IDs, movement records, and the OAuth credentials you supply when you connect your LIS account. Data is transmitted on your behalf for compliance reporting. |
| Railway | European Union | Object storage and hosting | Uploaded attachments including task documents, livestock photographs, and reports. Data is encrypted at rest. |
International Transfers
Several of the sub-processors above (Stripe, Resend, OpenAI, and Anthropic) are located in the United States. Transfers of personal data to these providers are made under either the UK International Data Transfer Agreement (IDTA) or the European Commission's Standard Contractual Clauses supplemented by the UK Addendum, as appropriate, and only where the provider maintains a lawful transfer mechanism such as Data Privacy Framework certification.
Full details of the transfer mechanism used for each sub-processor are set out in our Data Processing Addendum.
Changes to this List
We review this list regularly. If we add, replace, or materially change a sub-processor that handles personal data, we will update this page and, where required, provide at least 30 days' advance notice to affected business customers by email. Customers with an active subscription who object to a new sub-processor may raise concerns in writing to privacy@agrianta.com; if we cannot reasonably resolve the concern, you may terminate your subscription in accordance with our Terms of Service.
Public data sources we read from but do not send personal data to (for example, Open-Meteo for weather and the Veterinary Medicines Directorate product database) are not sub-processors and are not listed here.
Contact
Astraeus Technology Limited
Company Number: 15162283
Questions about sub-processors: privacy@agrianta.com