Last updated: July 8, 2026
Sub-processors
Effective: July 8, 2026
To support the delivery of our Services, Arist engages select third-party data processors that may have access to certain Customer Data. We perform rigorous due diligence to evaluate the privacy, security, and confidentiality practices of every sub-processor. Furthermore, we execute a formal data processing agreement with each one to ensure they comply with our strict standards and their applicable legal and contractual obligations.
| Entity | Purpose | Location(s) |
|---|---|---|
| Amazon Web Services, Inc. (AWS) | Cloud hosting services and data storage. | United States |
| Amazon Web Services, Inc. (AWS) | Content Delivery Network (CDN) [1] | Global |
| Auth0 (Okta) | User authentication | United States |
| Sentry | Platform telemetry, error traces, and logs | United States |
| Mailgun (Sinch) | Transactional / course email | United States |
| Twilio | Routing and transmission of messages, where SMS or WhatsApp delivery methods enabled. | United States |
| Slack | Routing and transmission of messages, where Slack delivery methods enabled. Data may be transmitted through any of the specified locations to provide faster service depending on the location of Customer's Slack Users. | United States Australia Germany India Ireland Japan Singapore South Africa United Kingdom |
| Microsoft (Teams) | Routing and transmission of messages, where Microsoft Teams delivery methods enabled. | United States |
| OpenAI | Content authoring, answer evaluation, Arist AI | United States |
| Anthropic | Arist AI | United States |
| ElevenLabs | Arist AI voice agent runtime | United States Global |
| Workato | HRIS-triggered enrollment/data integration | United States |
| Intercom | Customer support messaging and in-app communications | United States Global |
| Tray.io | HRIS-triggered enrollment/data integration | United States |
| Braintrust | AI evaluation, logging, and observability | United States |
[1] Content Delivery Networks expedite the transmission of content to users and may process data in any country, regardless of a Customer’s location, to better support end-users of the Services.
Updates
As our business evolves, the sub-processors we use may change. We will notify designated customer contacts via email at least 30 days before any new sub-processor begins processing customer personal data. To ensure you receive these notifications, please make sure your contact information is up-to-date. You can update your designated contact by reaching out to your Customer Success Manager or emailing us at support@arist.co.