Legal
Iris Cloud subprocessors
Last updated November 8, 2026
These are the companies that process personal information on our behalf to run Iris Cloud and our website. The Privacy policy explains what we handle and why.
| Subprocessor | What it does for us | Data it processes | Where |
|---|---|---|---|
| Anthropic, PBC | Provides the Claude AI models that do Iris Cloud's AI work, and answers visitors' questions to the website assistant on sites that use it | The content of each AI request and answer (briefs, page text, code, screenshots, visitors' messages to the assistant, any personal information in them); request metadata with an anonymous id | United States |
| Stripe, Inc. | Takes payments, runs subscriptions and renewals, issues invoices and receipts | Name, email, billing details, payment details, purchase history | United States |
| Google LLC (Google Cloud: Compute Engine, Cloud Run, Cloud SQL and Cloud Storage) | Hosts the Iris app and the Iris Cloud gateway, their databases and logs, builds and checks websites, and keeps the nightly backup copy of customers' photos and files | Account, billing and usage records; your projects and websites; backups of customers' photos and files; hosting logs (IP address, browser details, the addresses requested). The gateway keeps no prompt or assistant content | United States (us-central1) |
| Amazon Web Services, Inc. (Amazon SES and Amazon S3) | Sends your stores' emails and receives email sent to your stores' addresses, scanning it for spam and viruses and holding it until Iris has read it | Names, email addresses and contents of emails your stores send and receive, including your customers' | United States (us-east-2) |
| Resend | Sends account emails from [email protected]: sign-in codes, receipts, renewal notices, cancellation confirmations; and sends your stores' emails while Amazon reviews our account | Name, email address, message content | United States |
| Cloudflare, Inc. | Hosts buildwithiris.com and routes mail sent to our addresses. Hosts every customer website published from Iris, with its database, keeps customers' photos and files (R2), and runs our Stripe connection service, which keeps stores' Stripe access encrypted and holds Stripe's payment notices, encrypted, until they reach the store | IP address and browser details of visitors; email in transit; what customers' websites keep (orders, accounts, form messages, Inbox emails, chats), customers' photos and files, and Stripe payment notices (shoppers' names, emails and addresses) until delivered | United States and its global network |
| Google LLC (Gmail) | Receives and stores our support, privacy, legal and abuse email | Name, email address, messages and attachments, including problem reports you send us | United States |
Not subprocessors
- Services you connect to your own websites (Stripe, Shippo, email and newsletter services, analytics, advertising, chat, maps, GitHub and others). You use them with your own accounts and keys, and your agreement with them applies. Stripe appears twice because we also use it for our own billing, under a separate account.
Changes
We update this page before a new subprocessor starts processing personal information. If you want notice by email, ask at [email protected] and we will send it at least 30 days before, where we can.