Legal
Subprocessors
The third parties that may process personal data for Cloneto.
Draft — for legal review, not yet in effect. Items in dashed boxes are placeholders.
Last updated
Who they are
Cloneto is operated by Yin Yang Inc., the company behind ClonePartner, and is built and run by the ClonePartner team. It relies on ClonePartner's subprocessors. The list below is ClonePartner's, as published in its Trust Center. [Confirm: Yin Yang Inc. is the entity that offers Cloneto] [Confirm which of these apply to Cloneto]
What reaches them
- Client Azure or on-premises. Records Cloneto moves stay in that environment. The only outbound call is a license check, which carries no client records. [Confirm: no other outbound calls, including AI features] Records reach these subprocessors only if ClonePartner engineers help build or debug a pipeline with AI-assisted tooling (Cursor and the model providers it reaches) and the customer has not opted out of that tooling, as the Data Processing Agreement sets out.
- Hosted in-region. Records are processed in the region named in the Order Form. [Hosting provider and regions for hosted in-region]
The list
| Name | Purpose | Location |
|---|---|---|
| Anthropic | Foundation-model provider reached via Cursor, under the same no-training, limited-retention terms | United States |
| Cal.com | Scheduling and calendar management for support sessions | United States |
| Cloudflare | Content delivery, DNS, and edge security | Global edge network (HQ: United States) |
| Cursor (Anysphere, Inc.) | AI-assisted engineering tooling — privacy mode enforced, no model training, zero- or limited-retention | United States |
| DigitalOcean | Hosting, infrastructure and database services | Customers' Designated Region |
| Foundation-model provider reached via Cursor, under the same no-training, limited-retention terms | United States | |
| Google Workspace | Business email, documents, and internal collaboration | United States / EU |
| OVHcloud | Cloud infrastructure and compute services | Customers' Designated Region |
| OpenAI | Foundation-model provider reached via Cursor, under the same no-training, limited-retention terms | United States |
| Resend | Transactional email delivery | United States |
| Slack | Team and customer-channel communications | United States |
| Tally.so | Form and survey capture for intake and feedback | Belgium (EU) |
| Truto | Unified API framework powering internal orchestration | United States |
Changes
We give at least 30 days' notice before adding or replacing a subprocessor, as the Data Processing Agreement sets out. Customers can object on reasonable data protection grounds. Questions: legal@clonepartner.com.