Legal
Sub-Processors
Last updated: 20 September 2026
Refine engages the following third parties to assist in providing the service. Each is bound by data-protection terms equivalent to the obligations Refine owes its customers.
Sub-processor changes are notified to the customer's primary contact at least 30 days before engagement. See the Data Processing Agreement for the full terms.
| Sub-processor | Purpose | Region |
|---|---|---|
| Amazon Web Services (AWS) | Hosting, compute, storage, database, analytics | Multi-region (primary: ap-south-1) |
| Amazon Cognito | User authentication | ap-south-1 |
| Amazon SES | Transactional + newsletter email (when enabled) | ap-south-1 |
| Amazon Bedrock | Gen-AI narrative report generation | ap-south-1 |
Notice procedure
Refine will provide notice via email to the customer's primary contact at least 30 calendar days before engaging a new sub-processor or expanding the scope of an existing one. Customer may object in writing within that 30-day window and may terminate the underlying agreement if the objection cannot be addressed.
Data-protection terms
Each sub-processor is engaged under contractual terms that include at minimum: confidentiality obligations, restrictions on processing scope, security requirements equivalent to those Refine owes its customers, breach notification requirements, and return/deletion obligations on termination.
Questions
Privacy contact: info@habilelabs.io
How you hear about a change
When this list changes, we update this page and the date above, and give customers the notice the Data Processing Agreement describes. To have another security or compliance reviewer told of the next change by email, write to info@habilelabs.io.
Have privacy or compliance questions?
Talk to a human.
Refine is built and supported by HabileLabs, an AWS Advanced Tier Services Partner.