Draft — not yet in effect. The contracting entity is being finalised; contact support@attempts.ai.
[Legal]
Subprocessors
Attempts uses these third parties to provide the service. Each receives only the data listed for it. We update this page before a new subprocessor processes customer personal data.
These documents are provided by Attempts. The contracting entity and its registered details will be stated here once it is formed. Not yet in effect. Questions: support@attempts.ai.
| Subprocessor | Purpose | Data it receives | Region |
|---|---|---|---|
| Vercel | Website hosting, cookieless web analytics on public pages, and the website’s server functions: sign-in and sign-up, the workspace request proxy, the API-call proxy for deployments, the guided workspace and the project form. | Requests passing through: sign-in details on their way to authentication, session cookies, workspace requests and responses, prompts and answers of API calls to your deployments, project form contents, and guided workspace requests including its dataset uploads. Self-service dataset files do not pass through it; the workspace uploads them directly to cloud storage. | Region on request |
| Google Cloud (Cloud Run, Cloud Storage, Secret Manager, Cloud Logging; Firestore and Cloud Tasks for the guided workspace) | Runs our backend API and the worker that starts training, deployments and evaluations; stores customer files; holds service credentials; keeps request logs. | Uploaded datasets, prepared training, validation and test splits, run reports and evaluation answers; backend request logs (method, route, status and duration only). Guided workspace run records and files. | Backend: us-central1. Customer file storage: US multi-region. Guided workspace storage and records: us-central1. |
| Supabase (Auth and Postgres) | Account sign-up, sign-in, email confirmation and password reset; the workspace database. | Name, work email and password (stored by the provider); workspace records: dataset names and sizes, run records with task settings and dataset manifest, deployments, evaluation scores, API key hashes and encrypted keys, team members and invitations, credit balance, holds, ledger, card brand, last four and expiry, billing name and address, spend alerts and limits. | AWS us-west-2 |
| Fireworks AI | Model training and inference on dedicated GPUs. | The training split of an approved run, and the validation split when you choose validation-split evaluation; the fine-tuned model, stored in our account; prompts and answers of API calls to your deployments; up to 100 held-out test examples sent to your own deployment during an evaluation. In the guided workspace, held-out test prompts are also sent to the base model and to a temporary deployment for the before-and-after comparison. | Region on request |
| Stripe | Credit purchases, saving a card, card charges for bills above your credits and automatic top-ups, invoices, receipts. | Your email and account identifier, amounts, and the card details and billing address you enter on its hosted page, which it stores. For invoices: company name, billing address, billing email, PO number and tax ID. | Region on request |
| Resend | Email delivery. | Project form contents sent to the Attempts intake inbox; spend alert emails to the workspace owner; team invitation emails with a one-time link to the invited address; operational alerts to Attempts. | Region on request |
| Google (Google Analytics, through Google Tag Manager) | Website analytics on public pages only: the home page, Learning, Docs and the legal pages. Advertising features are off. | Page views, the referring page, approximate location, browser and device, and an identifier stored in first-party cookies for up to two years. For visitors in the EEA, the UK and Switzerland, no analytics cookies are set. Never sign-in, workspace or guided workspace pages. | Region on request |
Notes
- Dataset uploads, training and serving go to these providers only as described above. A cost estimate sends nothing to the training provider.
- Credits you buy are held in your Attempts account. They are not credits with any subprocessor.
- “Region on request”: we will confirm the processing region for that provider in writing. Email support@attempts.ai.