The third-parties who process your data.
This page lists the third-party service providers (each, a "Subprocessor") engaged by Dentate Inc. ("Dentate Inc.") to process Personal Information on behalf of Dentate customers. This list is maintained in accordance with Article 28 of the EU General Data Protection Regulation, the California Consumer Privacy Act as amended, and our Privacy Policy.
Dentate Business customers may subscribe to email notifications of changes to this list by contacting legal@dentate.io. We will provide at least 30 days' advance notice of new Subprocessors processing Personal Information of Dentate Business customers, except where a shorter period is required by law or to address an urgent security need.
Current Subprocessors
| Subprocessor | Function | Data Processed | Location |
|---|---|---|---|
| Cloudflare, Inc. | CDN, DDoS protection, SSL termination, bot management | IP addresses (anonymized before reaching our origin), browser metadata, request logs | Global edge network; US primary |
| Resend, Inc. | Transactional email delivery | Email addresses, message content for transactional emails (account notifications, security alerts, billing confirmations) | United States |
| Apple Inc. | App Store distribution, In-App Purchase processing, payment | Account email, payment information (Apple does not share card numbers with Dentate Inc.) | United States |
| Railway Corp. | Application hosting infrastructure for Dentate Business | All Tenant Data for Dentate Business customers, encrypted at rest and in transit | United States |
| GitHub, Inc. (Microsoft Corp.) | Source code hosting; no customer data processed | None (internal source code only) | United States |
AI Model Providers
The following providers may be engaged for AI model inference. Their engagement depends on the Service tier and customer configuration:
| Provider | Function | Applicable Tier | Data Handling |
|---|---|---|---|
| Anthropic, PBC | Claude AI model inference | Dentate Business (when configured); Dentate Mobile (with customer-supplied API key; direct device-to-Anthropic, not via Dentate Inc.) | Zero-retention API tier; contractually prohibited from training on inputs/outputs |
| OpenAI, LLC | GPT model inference | Dentate Business (when configured); Dentate Mobile (with customer-supplied API key; direct device-to-OpenAI, not via Dentate Inc.) | Zero-retention API tier; contractually prohibited from training on inputs/outputs |
For Dentate Mobile users who configure their own AI provider API key, communications are direct between the device and the provider. Dentate Inc. does not intermediate, proxy, or have visibility into these communications.
Notification of Changes
This page is updated to reflect all changes to our Subprocessor list. For material changes, defined as the addition of a Subprocessor that will process a significant category of Personal Information, or a change in the type of Personal Information processed by an existing Subprocessor, we will additionally:
- Notify Dentate Business customers via email at least 30 days in advance of the material change, unless a shorter period is necessary to address security or operational continuity
- Provide reasonable opportunity for Dentate Business customers to object to the material change by writing to legal@dentate.io within the notice period
- If we cannot reasonably accommodate an objection to a material change, the objecting Dentate Business customer may terminate its subscription for the affected Service without penalty
Routine substitution of a Subprocessor with another Subprocessor providing substantially equivalent services and protections is not a material change. Such substitutions are reflected on this page without separate email notice and do not trigger objection or termination rights.
Dentate Enterprise
Dentate Enterprise customers deploy on their own infrastructure. Dentate Inc. does not engage Subprocessors to process Dentate Enterprise Tenant Data. Subprocessor disclosures for Enterprise deployments are limited to license validation, support-channel infrastructure, and aggregate billing telemetry.