BoreholeIQ Subprocessors
Version 1.0.0 — effective 2026-04-26
This page lists the third-party subprocessors BoreholeIQ (Joticle, Inc.) uses to operate the platform. Subprocessors are bound to obligations consistent with the Terms of Service and the Privacy Policy.
If we add or replace a subprocessor, this page is updated and the Effective date above is incremented. Material changes are also announced to active customers by email at least 30 days in advance, except where a shorter notice period is necessary to address a security incident or regulatory obligation.
Current subprocessors
| Provider | Purpose | Hosting region |
|---|---|---|
| Microsoft Azure | Application hosting (App Service), object storage (Blob), secrets (Key Vault), AI inference (Azure OpenAI) | West US 3 |
| SmarterASP.NET | Managed SQL Server hosting for tenant data | United States |
| Resend | Transactional email delivery | United States / European Union |
| Stripe | Payment processing for paid plans | United States |
How subprocessors are evaluated
Before a new subprocessor is engaged, BoreholeIQ:
- Reviews the subprocessor's published security posture (SOC 2, ISO 27001, or equivalent attestations where available) and data residency claims.
- Signs a written data processing agreement that incorporates the confidentiality, security, and breach-notification obligations we owe our customers.
- Records the subprocessor in this list with its purpose and primary hosting region.
Customer rights
If a customer reasonably objects to a new subprocessor on data-protection grounds, the customer may terminate the affected subscription with a prorated refund of any unused prepaid period. Object in writing to hello@boreholeiq.com within 14 days of the announcement.
Contact
Questions about this list, or to request a copy of a specific subprocessor's data processing agreement, contact hello@boreholeiq.com.