This list identifies the sub-processors that Actionable Science, Inc. ("Rezolve.ai") engages to process Customer Data for the Rezolve.ai platform and Rapport. It forms Annex III of the Rezolve.ai Data Processing Addendum (the "DPA").
1. Our commitments
1.1 Due diligence. Before engaging a sub-processor, Rezolve.ai assesses its security and data protection measures, policies and relevant certifications or audit reports.
1.2 Contracts. Each sub-processor is bound by a enterprise terms imposing data protection obligations no less protective than the DPA, including processing only on documented instructions, confidentiality, appropriate security, assistance with data-subject requests and breaches, and deletion or return of data at the end of the engagement.
1.3 Transfers. Where a sub-processor processes Personal Data from the EEA, Switzerland or the United Kingdom outside those regions, the transfer is covered by the European Commission's Standard Contractual Clauses (2021/914) and, for the UK, the International Data Transfer Addendum. Transfers to our affiliate Actionable Science Labs in India are covered by our intra-group Standard Contractual Clauses.
1.4 Liability. Rezolve.ai remains liable for the performance of its sub-processors as set out in the DPA.
2. Changes and objections
2.1Rezolve.ai will give at least 30 days' notice before adding or replacing a sub-processor, by email to each customer's designated notice contact and by updating this page. Where an existing sub-processor starts to be used for another Service, the "Used for" column is updated. To register, email privacy@rezolve.ai.
2.2 A customer may object on reasonable data protection grounds within the notice period by emailing privacy@rezolve.ai. The process in Clause 8.4 of the DPA then applies.
3. Sub-processors
This is one list for all our Services. The "Used for" column shows the Services for which each sub-processor is used; a sub-processor processes a customer's data only for the Services that customer uses. The categories of personal data processed are described in the DPA.
# | Sub-processor | Purpose | Processing location | Used for |
|---|---|---|---|---|
1 | Microsoft Corporation (Azure; Microsoft 365) One Microsoft Way, Redmond, WA 98052, USA | Azure: cloud hosting, storage, networking, security and monitoring; Azure OpenAI model inference; VoiceIQ speech-to-text. Microsoft 365: transactional email for Rapport | Azure: according to the customer's hosting region (United States, United Kingdom, European Union (Ireland) or Canada). Microsoft 365: United States | Rezolve.ai platform (Azure); Rapport (Microsoft 365 email) |
2 | Anthropic, PBC 548 Market Street, PMB 90375, San Francisco, CA 94104, USA | AI model inference, with automated redaction of personal data where detected; no retention after processing; no training | Rezolve.ai platform: according to the customer's hosting region (for example, the European Union for EU-hosted customers). Rapport: United States | Rezolve.ai platform; Rapport (AI features) |
3 | OpenAI, L.L.C. 3180 18th Street, San Francisco, CA 94110, USA | AI model inference and knowledge embeddings; zero data retention; no training | United States; European Union for EU-hosted customers | Rezolve.ai platform |
4 | Google LLC 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA | AI model inference (Gemini), web search for answer grounding and push notifications (Firebase). Not used for EU-hosted customers | United States | Rezolve.ai platform (not for EU-hosted customers) |
5 | Pinecone Systems, Inc. 548 Market Street, PMB 90169, San Francisco, CA 94104, USA | Vector database for each customer's knowledge content (no conversation content) | According to the customer's hosting region (United States, European Union or Canada) | Rezolve.ai platform |
6 | Actionable Science Labs Private Limited (affiliate) F-14, Nehru Colony, D-1 Block, Dehradun 248001, Uttarakhand, India | Technical support and configuration, by logged remote access for a specific support case | India (remote access only) | Rezolve.ai platform; Rapport |
7 | Supabase, Inc. San Francisco, CA, USA | Rezolve.ai platform: database for Agent Studio, VoiceIQ and asset management. Rapport: database, authentication, file storage and server-side functions | Rezolve.ai platform: according to the customer's hosting region (United States or European Union). Rapport: United States | Rezolve.ai platform; Rapport |
8 | Twilio Inc. (SendGrid) San Francisco, CA, USA | Outbound email, including ticket notifications | United States | Rezolve.ai platform |
9 | Vercel Inc. San Francisco, CA, USA | Rapport: hosting of the Rapport console and website. Rezolve.ai platform: web hosting and AI request routing for pilot deployments only | United States | Rapport; Rezolve.ai platform (pilots only) |
Not sub-processors. Customer Integrations that a customer chooses to connect (for example ServiceNow and other IT service management platforms, Microsoft Teams, Slack and webhooks) receive data on the customer's instructions and are governed by the customer's own agreements.
4. Change history
Date | Change |
|---|---|
10 November 2026 | List published as a web page: one list for all Services, with a "Used for" column. Rezolve.ai platform: Supabase, Twilio SendGrid and Vercel (pilots only) added; Microsoft, Google, Pinecone and Anthropic updated. Rapport: Microsoft 365, Anthropic, Actionable Science Labs, Supabase and Vercel added. |