Legal

Trust Centre

Overview

This page explains where ProposAI is hosted and which third-party sub-processors help us deliver the service. Itigai Limited (trading as ProposAI) is the controller for account and website data, and a processor of customer content uploaded to the product.

For our broader data-protection commitments, see the Privacy Policy and GDPR pages. Questions about this page can be sent to info@itigailtd.com.

Hosting and infrastructure

ProposAI application servers, the application database, and customer document storage run on DigitalOcean in the LON1 region (London, United Kingdom). Uploaded documents are stored in DigitalOcean Spaces in LON1.

DigitalOcean states that proprietary customer data uploaded to Droplets, Spaces, and similar services remains in the region you choose unless they inform you otherwise. Platform account and support operations may still involve DigitalOcean entities and infrastructure partners outside the UK.

Sub-processors

We use the following sub-processors to operate ProposAI. Each processes personal data only as needed for the stated purpose.

  • Clerk, Inc. — Authentication and user/organisation management. Processing location: United States (and Clerk infrastructure partners). Privacy Policy · Subprocessors / Trust Centre
  • Stripe — Subscription billing and checkout. Card details are handled by Stripe; we receive non-sensitive payment summaries. Processing location: United Kingdom / European Economic Area, with global Stripe affiliates as required to process payments. Privacy Policy · Service providers & subprocessors
  • OpenRouter, Inc. — AI gateway for draft generation and embeddings. Prompt and document excerpts needed to produce answers are transmitted to OpenRouter and onward to the selected model provider(s). OpenRouter states that prompts and completions are not retained by default unless logging or improvement features are enabled on the OpenRouter account. Processing location: United States, plus the locations of routed model providers. Privacy Policy · Trust Centre · Data collection
  • PostHog, Inc. — Product analytics for the public site, onboarding, and product. We use PostHog Cloud EU (eu.i.posthog.com), hosted in the EU (Frankfurt). Privacy Policy · Subprocessors · GDPR guidance
  • Statcounter Ltd — Website traffic analytics (page views, referrers, approximate unique visitors). May set an "is_unique" cookie and process IP address, browser, and device metadata. Processing location: Ireland / Statcounter infrastructure. Privacy Policy · Refuse Statcounter cookies · GDPR FAQ

Customer content and AI

Customer tender packs, library documents, and drafted answers are used only to provide the ProposAI service to your organisation. We do not use customer documents to train our own models.

AI requests are routed through OpenRouter to the configured model providers. Model provider data practices can differ by model; review OpenRouter's privacy policy and provider disclosures when assessing residual risk for highly sensitive content.

Updates

We will update this page when we change hosting arrangements or add or remove material sub-processors. Continued use of ProposAI after an update constitutes notice of the revised list for operational transparency; contractual notice requirements in any signed agreement with Itigai Limited continue to apply where relevant.