/

Companies / Rig / Subprocessors

Rig subprocessors

rig.so

Rig is an AI-native data and systems integrator that builds maps across a company's siloed systems and supports data migration, reporting, and AI rollouts. It serves B2B and e-commerce teams.

Summarized from its homepage on 4 Nov 2026.

Classified asData and analyticsConsulting and services

London, England, GB

The Rig homepage

Subprocessors of Rig

Rig declares 8 subprocessors, including AI providers OpenAI.

From the company's own list.Read the source
SubprocessorPurposeLocationFirst seen
Amazon Web Services (AWS)Application hosting, context cache and secrets managementEU / US4 Nov 2026
LangfuseISO 27001 statementSOC 2 statementLLM traces and reasoning logsEU4 Nov 2026
MotherDuckIsolated per-tenant data warehouses for Rig-hosted customers. Not engaged where you connect your own warehouseUS (default), EU for enterprise or custom deployments4 Nov 2026
NangoHIPAA statementSOC 2 statementAuthentication and API calls for permitted integrationsUS4 Nov 2026
OpenAI, LLCFedRAMP registryLLM inference, for Rig-hosted LLM key customers only. Provisioned per tenant with zero data retention enabledUS4 Nov 2026
PostHogProduct analytics (team emails and user IDs)EU4 Nov 2026
SentryError monitoringEU4 Nov 2026
SupabaseHIPAA statementISO 27001 statementSOC 2 statementUser accounts and conversation cacheEU4 Nov 2026

Questions about Rig

Certifications

StandardWhat the source saysChecked
SOC 2 Type IICompany's statement“SOC 2 Type 2 EU and US hosting Role-based access Your warehouse or ours”The company's own statement. SOC 2 has no public registry; the report itself is shared by the company, usually under NDA.11 Nov 2026Source

We last read its homepage on 11 Nov 2026 and the FedRAMP Marketplace on 8 Nov 2026. A standard not shown here was not found in these sources. That does not mean Rig lacks it.

Vendor's own statement, retrieved from the source URL on the date shown. StrataDB does not verify the underlying claim. Data sources.

See Rig's full stack

Every vendor with its source and date, and an alert when Rig adds or drops one. The same lookup works for any company.

  • Every company and vendor, with its public source
  • 100 API calls a month, plus MCP and the Chrome extension
  • Work email only. No card, no sales call