AIRI loci Third Party Information Sharing List
United States version | Counsel review draft | October 22, 2026
Operator: HongKong AlRl Technology Limited | Privacy contact: contact@airilab.com
This list accompanies the US Privacy Policy and describes relevant service providers, recipient categories, information flows, and purposes. It distinguishes providers acting on our behalf from independently operated services. The Privacy Policy explains the applicable processing and safeguards.
1 AWS hosting and storage
Provider: Amazon Web Services (AWS).
Information and direction: Service content, account and workspace records, stored files and results, logs and backups, as used by the deployed service.
Purpose and method: Host, store, back up, and operate the US environment through infrastructure and storage services.
Location and role: Primary servers are hosted on AWS in Oregon, United States. Service storage, backups, and processing remain in the United States as described in Section 6 of the Privacy Policy.
Reference: https://aws.amazon.com/privacy/
2 Google sign-in
Provider: Google.
Information and direction: Receives authentication requests and authorization exchange information; returns authorized account identifiers, email, and profile fields.
Purpose and method: Authenticate users who choose Google sign-in.
Location and role: Google independently processes authentication information under its privacy notice; the AIRI loci US hosting commitment does not describe Google's independent processing locations.
Reference: https://policies.google.com/privacy
3 Microsoft sign-in
Provider: Microsoft.
Information and direction: Authentication and authorization exchange information; authorized identifiers, email, and profile fields returned to AIRI loci.
Purpose and method: Authenticate users who choose Microsoft sign-in.
Location and role: Microsoft independently processes authentication information under its privacy statement; the AIRI loci US hosting commitment does not describe Microsoft's independent processing locations.
Reference: https://privacy.microsoft.com/privacystatement
4 Email authentication and service messages
Provider category: Email delivery service providers.
Information and direction: Destination email, OTP or template variables, delivery and verification or message-status records; other service-message content only as used.
Purpose and method: Deliver login codes and requested transaction or security communications through backend interfaces.
Location and role: Processing performed on our behalf is subject to the US data residency commitments in Section 6 of the Privacy Policy.
Reference: Applicable provider privacy notices and service terms.
5 Stripe payment and subscription services
Provider: Stripe.
Information and direction: Necessary order, amount, currency, workspace or customer reference, payment, subscription, refund, and reconciliation data; payment information entered directly in the payment flow.
Purpose and method: Process purchases, recurring billing, cancellations, refunds, fraud prevention, and financial records through checkout and backend interfaces.
Location and role: Stripe independently processes some information for payment, fraud prevention, and legal compliance under its privacy policy. The AIRI loci US hosting commitment does not describe these independent processing locations.
Reference: https://stripe.com/privacy
6 Discord community support
Provider: Discord.
Information and direction: Messages, attachments, account and contact details you choose to submit through the community.
Purpose and method: Provide optional community support; formal privacy requests go to contact@airilab.com.
Location and role: Independent community processing is outside the AIRI-operated service environment.
Reference: https://discord.com/privacy
7 Content delivery file processing search and security services
Provider categories: Content delivery, file processing, search, and security service providers used for the US service.
Information and direction: Only necessary file objects or accessible links, search queries or URLs, task context, safety-review content, access records, and response information for the actual function.
Purpose and method: Deliver content, process files, retrieve requested information, or check safety when the function is triggered.
Location and role: Processing on our behalf is subject to the US data residency commitments in Section 6 of the Privacy Policy.
Reference: Applicable provider privacy notices and service terms.
Personnel access
Overseas operational employees are addressed in Section 6 of the Privacy Policy rather than automatically classified as independent third-party providers. Where personnel are employed by a separate group company or vendor, the relevant legal entity and processing relationship must also be documented and disclosed as applicable.