Sombrero™ · Sub-processors
Sub-processors
Effective 2026-07-28 · The third-party providers Coseera LLC engages to process personal data, and the ones we expect to engage before general availability.
Currently processing
These three providers process personal data today. The only personal data Coseera LLC currently holds is what you give us through the early-access form or the waitlist — a work email address, an optional answer to which GRC platform you run, and your consent record.
| Provider | Purpose | Data |
|---|---|---|
| Vercel Inc. | Website hosting and the serverless function that receives form submissions | Email address and GRC-platform answer, in transit |
| HubSpot, Inc. | Customer relationship management, consent record storage, confirmation email | Email address, GRC-platform answer, consent record |
| Google LLC | Google Workspace — company email and document storage | Email correspondence you send us |
Planned, not yet processing
Sombrero™ is pre-general-availability and has no customers, so the product data pipeline is not carrying anyone's data. We list the providers we expect to engage so the register is complete rather than only convenient. None of the providers below is processing any personal data today. Each will move to the table above, and this page will be updated, before it starts.
| Provider | Expected purpose | Status |
|---|---|---|
| Amazon Web Services, Inc. | Product infrastructure — compute, database, logging | Not currently processing any personal data |
| Anthropic PBC | AI model provider (opt-in per customer) | Not currently processing any personal data |
| OpenAI, L.L.C. | AI model provider (opt-in per customer) | Not currently processing any personal data |
| Okta, Inc. (Auth0) | Identity and authentication for the product | Not currently processing any personal data |
| Stripe, Inc. | Billing and payments | Not currently processing any personal data |
| Twilio Inc. (Segment) | Product analytics — under evaluation, not adopted | Not currently processing any personal data |
Cookies and trackers
These pages set no cookies. We load no analytics or advertising trackers, and the signup form posts directly to HubSpot without loading HubSpot's tracking script. No advertising or data-broker sub-processor appears above because we use none.
Transfers
Every provider named above is headquartered in the United States and processes data on our behalf under its own data-processing terms, which carry the transfer safeguards for personal data originating in the EEA and the UK.
Changes
We update this page when a sub-processor is added, removed, or starts processing personal data. To be notified of changes, or to ask about a specific provider, write to privacy@coseera.com.
This register covers the Sombrero™ marketing site and waitlist. The full product data-processing agreement is a separate pre-GA artifact. Sombrero and Coseera are trademarks of Coseera LLC (applications pending).