BREKFUZ INC.

Subprocessors

The companies that help us run Brekfuz and may handle customer data in the process. Each is bound by contract to protect it and to use it only to provide their service to us.

LAST UPDATED 19 AUGUST 2026

Privacy Policy Security Overview Subprocessors Security · The Architecture

These are the companies that help us run Brekfuz and may handle customer data in the process. Each is bound by contract to protect it and to use it only to provide their service to us.

We give customers at least 30 days’ notice before adding a new subprocessor. To be notified, email support@brekfuz.com.

01

Infrastructure

VendorWhat they doWhat they handleLocation
Amazon Web ServicesHosting, database, storage, login, email delivery, encryption keysAll customer dataUS (Ohio)
TurbopufferSearch indexMessage and event text, and the numerical representations used for searchUS (Iowa)
Neo4j AuraRelationship graphNames, email addresses, and connections between people and topicsRegion confirmation pending
02

AI model providers

VendorWhat they doWhat they handleLocation
OpenAIGenerates answers, and creates the numerical representations used for searchExcerpts of email, calendar and Slack content, plus the user’s questionUS
CohereRe-ranks search results for relevanceThe user’s question and short summary textUS
AnthropicBackup answer generation, off by defaultSame as OpenAI, when enabledUS

None of these providers use Brekfuz customer data to train their models. This is required by their standard API terms, and separately required of us by Google’s Limited Use rules for Gmail data — set out in our Privacy Policy.

03

Connectivity and communications

VendorWhat they doWhat they handleLocation
ComposioManages the connections to Slack, GitHub, Jira, Linear and FirefliesAccess credentials for those tools, and the data passing through themUS
ResendSends invitation and notification emailsRecipient name, email address and company nameUS
04

Services we do not use

Brekfuz does not use any third-party error tracking, analytics or application monitoring service. Our system metrics stay inside our own AWS account and do not include customer content or identifiers.

05

Google Workspace direct connection

Enterprise customers can connect Google Workspace using domain-wide delegation, where your own Workspace administrator grants access directly with credentials you control. On this setup, Composio is not involved in the Gmail or Calendar connection at all.

We recommend this option for enterprise deployments — see section 9 of the Security Overview.

CONTINUE READING
Privacy Policy Security Overview

To be notified before this list changes, get in touch.

Ask us anything Back to the site FOUND SOMETHING WE GOT WRONG? SUPPORT@BREKFUZ.COM · WE ANSWER FAST