Roone uses the following third-party service providers ("Sub-processors") to deliver the Platform. This list is provided in accordance with Section 9 of Roone's Terms of Service and Section 12.6 of the Data Processing Addendum incorporated therein.
Customers who have executed a Data Processing Addendum with Roone will be notified via email before any new Sub-processor is added that materially affects the processing of Customer Data. Customers may object to new Sub-processors in accordance with the notice and objection procedure set out in the DPA.
AI and Machine Learning Providers
| Sub-processor | Purpose | Location | Transfer Mechanism |
|---|
| Anthropic, PBC | Large language model inference (Claude API) — content drafts, scoring, enrichment, Editorial DNA prompts, chat | United States | Commercial Terms of Service; DPA + SCCs available via Anthropic Console. No model training on API customer data. 30-day default retention. |
| OpenAI, LLC | Text embeddings (text-embedding-3-small) — semantic search, signal clustering, knowledge retrieval | United States | OpenAI Business Terms; Data Processing Addendum; SCCs. API inputs not used for training by default. Up to 30-day abuse-monitoring retention. |
| Groq, Inc. | LLM inference (Llama) for signal scoring and cluster summarization; Whisper for audio/video transcription | United States (Google Cloud Platform infrastructure) | Groq DPA + SCCs. Inference data not retained by default. Zero Data Retention enabled globally. |
Data and Content Sources
| Sub-processor | Purpose | Location | Notes |
|---|
| Event Registry (NewsAPI.ai) | News data API — article metadata, titles, summaries, and entity data from 150,000+ publishers used to power Intelligence Feeds | European Union | Acts as an independent data controller for the news content it provides. Roone does not store full article body text beyond transient enrichment processing. |
| RSS.app (Magnet Networks) | Social-to-RSS feed conversion — enables monitoring of public social media accounts as editorial signal sources | United States | Standard Terms + paid commercial plan. |
Supplementary Data Sources
| Source | Purpose | Location | Notes |
|---|
| Google News RSS (Alphabet Inc.) | Free, anonymous RSS feed used as a supplementary signal source for keyword news monitoring alongside Intelligence Feed results | United States (global CDN) | No formal API agreement; no personal data is transmitted. Usage is subject to Google's general Terms of Service. This is an unofficial, undocumented endpoint; Roone does not rely on it as a guaranteed or contractually supported data channel. |
Infrastructure and Hosting
| Sub-processor | Purpose | Location | Transfer Mechanism |
|---|
| Railway Corporation | Application hosting (web + worker services), managed PostgreSQL database, Redis job queue | United States (Netherlands and Singapore available on request) | Railway DPA; EU-U.S. DPF certified. Sub-processors include Google Cloud Platform (compute infrastructure) and Cloudflare (CDN/edge). |
| Google Cloud Platform (Alphabet Inc.) | Underlying compute and storage infrastructure (sub-sub-processor via Railway and Groq) | United States | Sub-sub-processor of Railway Corporation and Groq, Inc. Google Cloud DPA + SCCs apply. |
| Cloudflare, Inc. | CDN / edge network (sub-sub-processor via Railway) | United States (global edge) | Sub-sub-processor of Railway Corporation. Cloudflare DPA applies. |
Communications
| Sub-processor | Purpose | Location | Transfer Mechanism |
|---|
| Twilio Inc. (SendGrid) | Transactional email delivery — password resets, signal alerts, report deliveries, user invitations, account notifications | United States | Twilio DPA auto-incorporated; SCCs + EU-U.S. DPF. Roone's domain authenticated on roone.ai. |
Monitoring and Security
| Sub-processor | Purpose | Location | Transfer Mechanism |
|---|
| Functional Software, Inc. (Sentry) | Application error monitoring and performance tracking across web and worker services | United States (EU data storage available on request for EU-based customers) | Sentry DPA + SCCs. PII scrubbing configured to minimize personal data in error events. EU customers: contact hello@roone.ai to request EU data residency. |
Payments
| Sub-processor | Purpose | Location | Notes |
|---|
| Stripe, Inc. | Payment processing and billing management | United States | Acts as an independent data controller for payment data. Stripe processes payment card information directly; Roone does not store full card numbers. |
This list was last updated on April 20, 2026. To be notified of changes, ensure your account email is current. Questions? Contact us at hello@roone.ai · Notice News, Inc. d/b/a Roone · PO Box 93, 179 Rehoboth Ave., Rehoboth Beach, DE 19971
