Subprocessors
Arodus uses the subprocessors below to run the service. Every one that handles customer data is also a vendor in Arodus's own workspace, monitored on the same daily cycle as yours. We email subscribers 30 days before adding a subprocessor that handles customer data, as set out in our Data Processing Addendum.
Last updated October 2, 2026. To get change notices, email security@arodus.com with "Subscribe" in the subject.
Current subprocessors
| Subprocessor | What it does for Arodus | Customer data it handles | Location |
|---|---|---|---|
| Amazon Web Services, Inc. | Hosting, database, storage, queues, sign-in (Amazon Cognito), transactional email (Amazon SES), monitoring | All customer data stored or processed by Arodus | United States (us-east-1) |
| Amazon Web Services, Inc. (Amazon Bedrock, Anthropic Claude models) | AI processing of public records, and drafting research summaries for vendors that need manual review | Business name and website domain of a vendor a customer added that isn't yet in the Arodus catalog | United States |
| Statsig, Inc. | Feature flags, product analytics and performance traces | Pseudonymous user ID, email domain, and request metadata (route, status and timing) | United States |
| Google LLC | Sign in with Google; Google Workspace (email used by the Arodus review team); Google Chat (internal operations alerts) | Name and email at sign-in; vendor names in review emails; addresses of undeliverable platform emails in alerts | United States |
| Microsoft Corporation | Sign in with Microsoft (Entra ID) | Name and email at sign-in | United States |
| Stripe, Inc. | Subscription billing and payments | Billing name, email and payment card details. Card numbers are held by Stripe | United States |
Integrations you connect
These are systems a customer chooses to connect. Arodus reads from them.
| Integration | What Arodus reads |
|---|---|
| Intuit QuickBooks Online | Accounts payable and your company profile. See the Trust page. |
| Oracle NetSuite | Accounts payable and your company profile. See the Trust page. |
Public sources Arodus queries
To research a vendor, Arodus queries public sources such as SEC EDGAR, GLEIF and the vendor's own website using that vendor's business name and domain. These queries carry nothing that identifies the customer who pays the vendor.
Change log
| Date | Change |
|---|---|
| October 2, 2026 | Statsig no longer receives search terms entered in the app. |
| October 2, 2026 | First published list. |
Questions: security@arodus.com