Trust

Sub-processors

Last updated: 2026-10-29 · Aurora Digital Solutions Inc. (o/a Aurora Designs)

Overview

Aurora Digital Solutions Inc., operating as Aurora Designs ("Aurora"), engages the third-party service providers below, which may store or process personal information collected by Aurora or processed on behalf of its clients. This page is the Sub-processor Page referred to in Aurora's Data Processing Addendum and is referenced in its Privacy Policy.

Model training on customer content is disabled in the AI tools listed below. Aurora's safeguards are described on the Security page.

Infrastructure & website

Provider Purpose Data Location
Cloudflare Cloudflare, Inc. Website hosting (Cloudflare Pages), DNS, content delivery, edge security, cookieless web analytics Website visitor IP addresses and request logs Global edge network; HQ United States
Google Analytics 4 Google LLC Website usage analytics Pseudonymous visitor interaction data United States
GitHub GitHub, Inc. (Microsoft) Private source-code repositories for our website and the automations we build for clients; offsite copy of project work Primarily source code and configuration; may contain limited client project data where a build requires it United States
Tailscale Tailscale Inc. Private, end-to-end encrypted network (WireGuard) used for remote access to the Aurora machine that stores client data Device names, network addresses, and account identity. Traffic is encrypted end to end and is not readable by Tailscale United States (coordination metadata only)

Business operations

Provider Purpose Data Location
Google Workspace Google LLC Business email, calendar, video meetings, and file sharing Correspondence, calendar invites, and files clients send us United States
Calendly Calendly LLC Meeting booking Name, email, and the booking answers you provide United States
Notion Notion Labs, Inc. Legacy Legacy internal workspace. No new client data is added; remaining content is being migrated and deleted Historical internal notes and project documentation United States

Finance

These providers process only Aurora's own business and billing information. They do not process Client Personal Data and are not Sub-processors under the Data Processing Addendum. They are listed for transparency.

Provider Purpose Data Location
QuickBooks Online Intuit Inc. Accounting, invoicing, and bookkeeping Client billing contacts, invoices, and payment records United States
Wise Wise Payments Canada Inc. Business banking and international payments Payer and payee names, payment amounts, and banking details needed to move funds Canada / United Kingdom
EQ Bank Equitable Bank Business banking Payer names, payment amounts, and transaction records Canada

AI assistants

Provider Purpose Data Location AI training
Claude Anthropic, PBC AI assistant and coding tool (Claude, Claude Code) for research, drafting, analysis, and building client automations Prompts and files we provide, which can include client business data needed for an engagement United States Disabled for customer content
ChatGPT OpenAI, L.L.C. AI assistant for research and drafting Prompts and files we provide United States Disabled for customer content

AI meeting notes

Provider Purpose Data Location AI training
Fathom Fathom Video, Inc. AI meeting recording, transcription, and summaries Meeting audio and video, transcripts, participant names and emails United States Disabled for customer content
Granola Granola AI, Inc. AI meeting transcription and note-taking Meeting transcripts, notes, participant names and emails United States Disabled for customer content
Sana Sana Labs AB AI meeting notes and knowledge assistant Meeting audio, transcripts, participant names and emails, notes Sweden (EEA) / United States Disabled for customer content

Design

Provider Purpose Data Location
Figma Figma, Inc. Design and prototyping Design files; personal information only where a design includes it United States

Providers not listed

  • Client Platforms. Aurora builds automations within software platforms licensed by its clients, such as workflow, CRM, email, and file-storage tools. Those providers are engaged by the client under the client's own agreements and are not Aurora's sub-processors. Aurora accesses them only with the permissions the client grants.
  • Aurora-owned hardware. Client data held by Aurora is stored primarily on an encrypted volume on Aurora-owned and Aurora-managed hardware, as described on the Security page.
  • Domain registration. Aurora's domain registrar holds only Aurora's own registration information.

Changes

Aurora updates this page before a new sub-processor begins processing Client Personal Data. Clients that wish to receive email notice of changes may request it from [email protected]. Objections are handled under section 5 of the Data Processing Addendum.