Last updated: April 15, 2026

This page lists the third-party sub-processors Pando AI, Inc. uses to operate Aspen. All sub-processors are bound by data processing agreements and evaluated for security and privacy practices.

OpenAI (United States) - Purpose: AI language model for coaching, feedback, and conversation - Data processed: Message content, employee names, feedback text

Railway (United States) - Purpose: Application and database hosting - Data processed: All customer data

Langfuse (United States) - Purpose: LLM observability and prompt management - Data processed: LLM inputs and outputs, conversation traces

PostHog (United States) - Purpose: Product analytics and feature flags - Data processed: Usage events, anonymized user identifiers

Clerk (United States) - Purpose: Authentication and identity management - Data processed: User email, name, login credentials

Resend (United States) - Purpose: Transactional email delivery - Data processed: Email addresses, invitation content

Stripe (United States) - Purpose: Billing and payment processing - Data processed: Billing contact info, payment details

Slack (United States) - Purpose: Workplace messaging platform integration - Data processed: Messages, user profiles, channel info

Microsoft Teams (United States) - Purpose: Workplace messaging platform integration - Data processed: Messages, user profiles, channel info

We may update this list as we add or change vendors. We will communicate material changes to affected customers via Slack or email.

For questions about our sub-processors, contact privacy@pando.com.

For questions, contact support@pando.com or use the in-app chat.