/

Companies / ISMS Copilot / Subprocessors

ISMS Copilot subprocessors

ismscopilot.com

ISMS Copilot provides an AI assistant that answers questions about compliance frameworks such as ISO 27001, SOC 2 and NIS 2, and checks compliance work against official sources. It serves consultants, consultancies, in-house compliance teams, auditors, builders and compliance platforms.

Summarized from its homepage on 11 Nov 2026.

Classified asCompliance and risk

The ISMS Copilot homepage

Subprocessors of ISMS Copilot

ISMS Copilot declares 9 subprocessors, including AI providers Fireworks AI, Mistral AI, OpenRouter, Together AI, Anthropic, Cerebras, xAI.

From the company's own list.Read the source
SubprocessorPurposeLocationFirst seen
Axiom, Inc.Log storage for the API backend's application logs (30 days)EU (Frankfurt); US entity; SCCs11 Nov 2026
Fireworks AI, Inc.ISO 27001 statementSOC 2 statementAI model inference host (global mode)United States11 Nov 2026
Fly.io, Inc.HIPAA statementSOC 2 statementCompute hosting for the API backendEU deployment; US-incorporated entity processes under SCCs11 Nov 2026
Functional Software, Inc. dba SentryError monitoringEU ingest; US entity; SCCs11 Nov 2026
Inceptron ABISO 27001 statementAI model inference host (global mode)Sweden, EU11 Nov 2026
Mistral AI SASAI model inference (EU mode)EU (France)11 Nov 2026
OpenRouter, Inc.SOC 2 statementRouter/aggregator and US importer that first receives Request Content (global mode)United States11 Nov 2026
Supabase, Inc.HIPAA statementISO 27001 statementSOC 2 statementDatabase for the API metadata tables (private.api_*: API-key hashes, usage and credit ledger)Data at rest in the EU (production project region); US-incorporated entity11 Nov 2026
Together AI, Inc.AI model inference host (global mode)United States11 Nov 2026

Questions about ISMS Copilot

Vendor's own statement, retrieved from the source URL on the date shown. StrataDB does not verify the underlying claim. Data sources.

See ISMS Copilot's full stack

Every vendor with its source and date, and an alert when ISMS Copilot adds or drops one. The same lookup works for any company.

  • Every company and vendor, with its public source
  • 100 API calls a month, plus MCP and the Chrome extension
  • Work email only. No card, no sales call