Sub-processors
Everyone else who touches your data
The complete list. If a provider is not here, it does not process customer data for us.
Effective 10 September 2026 · Questions: iris@magnoliasystems.ai
Current sub-processors
| Provider | What it does | Where |
|---|---|---|
| Microsoft Azure — compute and storage | Runs the applications and stores workspaces, planning conversations and specifications | East US 2, United States |
| Microsoft Azure OpenAI | Generates IRIS responses from what you write. Not used to train foundation models | East US 2, United States |
| Microsoft Entra | Sign-in. Holds your account identity so that we do not have to hold a password | United States |
| Azure Communication Services | Sends the emails the product sends you | United States |
| Stripe | Takes payment and manages subscriptions. Receives the billing email, organization name and seat count. Card details go from your browser to Stripe and never reach a Magnolia system | United States |
| Azure Application Insights | Operational telemetry — requests, errors and timings. Not message content | East US 2, United States |
What is deliberately absent
There is no analytics provider, no advertising network, no session-recording tool and no customer-data platform on this list, because there are none in the products or on this website. That is a design decision, and it is enforced in our engineering rules rather than left to good intentions.
Changes
We will update this page before a new sub-processor begins processing customer data. Customers with a signed Data Processing Addendum receive notice as that addendum requires, and may object to a new sub-processor on the terms it sets out.