Subprocessors
Last updated: January 14, 2026
Ado, Inc. d.b.a. Bamboo ("Bamboo") uses third-party service providers ("Subprocessors") to assist in providing our Services. This page lists the Subprocessors currently authorized to process Customer Data on behalf of our customers.
Subprocessor List
Infrastructure and Hosting
| Subprocessor | Purpose | Location |
|---|---|---|
| Vercel Inc. | Application hosting and deployment | United States |
| Supabase Inc. | Database hosting, authentication, and edge functions | United States |
Data Connectors and Integrations
| Subprocessor | Purpose | Location |
|---|---|---|
| Windsor.ai | OAuth authentication and unified advertising data API | European Union |
AI Model Providers
The following AI providers are accessed through OpenRouter to deliver AI-powered features of the Services. Bamboo uses its own API credentials and these providers are contractually prohibited from using Customer Data for model training.
| Subprocessor | Purpose | Location |
|---|---|---|
| OpenRouter Inc. | AI model routing and API gateway | United States |
| Anthropic PBC | AI language model provider (Claude) | United States |
| xAI Corp. | AI language model provider (Grok) | United States |
| OpenAI, L.L.C. | AI language model provider (GPT models) | United States |
| Google LLC | AI language model provider (Gemini) | United States |
Support and Operations
| Subprocessor | Purpose | Location |
|---|---|---|
| n8n GmbH | Workflow automation | Germany |
Updates to This List
Bamboo may update this Subprocessor list from time to time as we engage new Subprocessors or change existing ones. In accordance with our Data Processing Agreement, we will provide at least thirty (30) days' notice before engaging a new Subprocessor.
Notification of Changes
Updates to this list will be posted on this page with a revised "Last updated" date. We recommend checking this page periodically.
If you have subscribed to Subprocessor change notifications, you will receive an email notification when this list is updated.
Objection Process
Under our Data Processing Agreement, you may object to a new Subprocessor by providing written notice to Bamboo within fifteen (15) days of the notification. To submit an objection, contact us at legal@withbamboo.com.
Data Processing Safeguards
All Subprocessors are bound by contractual obligations that require them to:
- Process Customer Data only as instructed by Bamboo
- Implement appropriate technical and organizational security measures
- Not use Customer Data for their own purposes or for training AI models
- Maintain confidentiality of Customer Data
- Assist with data subject requests as required
- Delete or return Customer Data upon termination
AI Provider Commitments
Bamboo's AI Subprocessors (Anthropic, xAI, and OpenAI) have provided contractual commitments confirming:
- Customer Data is not used to train, improve, or develop their AI models
- Customer Data is processed solely to provide API responses
- Customer Data is not retained beyond the duration necessary to provide the service
- Appropriate security measures are implemented
Contact
For questions about our Subprocessors, contact us at:
Ado, Inc. d.b.a. Bamboo
Email: legal@withbamboo.com