Last updated: 15 October 2026
The Scholaris Labs group uses the third-party service providers below ("sub-processors") to process personal data for the purposes described in our Privacy Policy and Data Processing Addendum. Each one is bound by a written agreement with data protection and security obligations.
We will update this page, and give at least 30 days' notice to customers who have signed our Data Processing Addendum, before we add or replace a sub-processor. To subscribe to updates, email privacy@scinodes.com.
1. Group companies
| Entity | Role | Location |
|---|---|---|
| Scholaris Labs UK Limited | Operates the global platform and infrastructure; processes data for Kopili Technologies Private Limited for users in India | United Kingdom |
| Kopili Technologies Private Limited | Operations, customer support and billing in India; processes data for Scholaris Labs UK Limited where needed | India |
2. Infrastructure and hosting
| Sub-processor | Purpose | Personal data | Processing location |
|---|---|---|---|
| Amazon Web Services, Inc. (Elastic Beanstalk, RDS PostgreSQL, S3, Lambda) | Application hosting, relational database, file storage, PDF processing | All Service data | EU (Stockholm, eu-north-1) |
| MongoDB, Inc. (Atlas) | Document database | Account data, Your Content | India (Mumbai, AWS ap-south-1) |
| Neo4j, Inc. (Aura) | Graph database for scholarly and network data | Mainly public bibliographic data; project graph references | EU |
| Vercel Inc. | Front-end hosting and content delivery | IP address, request metadata | Global edge network; United States |
| Backblaze, Inc. (B2) | Encrypted backups | All Service data (in backups) |
3. Authentication and communications
| Sub-processor | Purpose | Personal data | Processing location |
|---|---|---|---|
| Google LLC (Firebase Authentication) | Sign-in, password reset, session management, and transactional authentication emails | Name, email, profile photo, sign-in identifiers, IP address | United States; global |
4. AI model providers
The content these providers receive in every case is your prompts, chat history, selected project context, and extracted document text. None of them may use it to train their models.
| Sub-processor | Purpose | Processing location |
|---|---|---|
| Anthropic, PBC | AI research assistant and text processing | United States |
| OpenAI, L.L.C. | AI research assistant and text processing | United States |
| Google LLC (Gemini API) | AI research assistant and text processing | United States |
| Amazon Web Services, Inc. (Bedrock) | Model hosting and inference | EU (Stockholm) where available |
5. Payments
| Sub-processor | Purpose | Personal data | Processing location |
|---|---|---|---|
| Stripe Payments Europe, Ltd. / Stripe, Inc. | Subscription payments outside India | Name, email, billing address, payment details, transaction data | Ireland; United States |
| Razorpay Software Private Limited | Subscription payments in India | Name, email, phone, payment details, transaction data | India |
6. Scholarly data sources (not sub-processors)
The Service retrieves public bibliographic data from the sources below. We send them search queries and identifiers, such as DOIs. We do not send them your account data or Your Content.
- OpenAlex (OurResearch)
- Crossref
- Research Organization Registry (ROR)
- DOI registration agencies (doi.org)
- Publisher and repository websites, for open-access full text, fetched in line with their robots directives