DRAFT — this Sub-Processors list requires legal review
Sub-Processors are confirmed but this page is awaiting final legal review before publication. Notice procedures for changes are described below.
Sub-Processors
Last updated: 3 June 2026
Refine engages the following third parties to assist in providing the service. Each is bound by data-protection terms equivalent to the obligations Refine owes its customers.
Sub-processor changes are notified to the customer's primary contact at least 30 days before engagement. See the Data Processing Agreement for the full terms.
| Sub-processor | Purpose | Region |
|---|---|---|
| Amazon Web Services (AWS) | Hosting, compute, storage, database, analytics | Multi-region (primary: ap-south-1) |
| Amazon Cognito | User authentication | ap-south-1 |
| Amazon SES | Transactional + newsletter email (when enabled) | ap-south-1 |
| OpenAI A migration to Amazon Bedrock is planned. This page will be updated when it completes. | Gen-AI narrative report generation | US |
Notice procedure
Refine will provide notice via email to the customer's primary contact at least 30 calendar days before engaging a new sub-processor or expanding the scope of an existing one. Customer may object in writing within that 30-day window and may terminate the underlying agreement if the objection cannot be addressed.
Data-protection terms
Each sub-processor is engaged under contractual terms that include at minimum: confidentiality obligations, restrictions on processing scope, security requirements equivalent to those Refine owes its customers, breach notification requirements, and return/deletion obligations on termination.
Questions
Privacy contact: info@habilelabs.io
Subscribe to sub-processor change notices
All customers' primary contacts automatically receive change notices. To subscribe additional security or compliance reviewers, email info@habilelabs.io.
Have privacy or compliance questions?
Talk to a human.
Refine is built and supported by HabileLabs, an AWS Advanced Tier Services Partner.