Incident AI Subprocessor Register
MineGuard AI uses selected third-party subprocessors to provide Incident AI. These subprocessors support secure hosting, database services, evidence storage, AI processing, OCR, transcription, video understanding and optional presentation generation.
Standard deployment
Subprocessors used for Incident AI tenants on the standard hosted deployment.
| Subprocessor | Purpose | Primary Region / Location | Key Security Measures | References |
|---|---|---|---|---|
| Supabase | Database, authentication and backend services for Incident AI | Based on customer configuration; Australia / Oceania region available | SOC 2, encryption in transit and at rest, PostgreSQL security, Row Level Security, access controls | |
| Wasabi Technologies | Secure object and multimedia storage for uploaded evidence files | Based on customer configuration; Sydney / Australia region available | SOC 2, ISO 27001, PCI-DSS data centre controls, encryption, IAM/MFA, object immutability | |
| Anthropic | AI reasoning, summarisation, investigation analysis and generated outputs | Subject to provider API configuration | Commercial/API data controls, encryption in transit, Zero Data Retention agreement in place for eligible Anthropic API use by MineGuard AI | |
| TwelveLabs | Video understanding, video analysis, semantic video search and video-to-text generation | Subject to provider API configuration | SOC 2 Type 2, encryption, access controls, infrastructure security and compliance monitoring | |
| OpenAI | Audio transcription and AI processing where applicable | Subject to provider API configuration | API data controls, encryption in transit, data not used for model training by default unless opted in | |
| Microsoft Azure | OCR, document intelligence, image processing and related cloud processing | Subject to service configuration | Microsoft cloud compliance programs, encryption, access controls and data protection controls | |
| Gamma Tech, Inc. | Optional presentation generation for incident learning packs | Subject to provider configuration | SOC 2 Type II resources, TLS, product security controls and data retention procedures | |
| Render | Application hosting where used for specific deployments | Subject to deployment configuration | SOC 2 Type 2, ISO 27001, encrypted traffic and platform security controls |
Supabase
Database, authentication and backend services for Incident AI
Based on customer configuration; Australia / Oceania region available
SOC 2, encryption in transit and at rest, PostgreSQL security, Row Level Security, access controls
Wasabi Technologies
Secure object and multimedia storage for uploaded evidence files
Based on customer configuration; Sydney / Australia region available
SOC 2, ISO 27001, PCI-DSS data centre controls, encryption, IAM/MFA, object immutability
Anthropic
AI reasoning, summarisation, investigation analysis and generated outputs
Subject to provider API configuration
Commercial/API data controls, encryption in transit, Zero Data Retention agreement in place for eligible Anthropic API use by MineGuard AI
TwelveLabs
Video understanding, video analysis, semantic video search and video-to-text generation
Subject to provider API configuration
SOC 2 Type 2, encryption, access controls, infrastructure security and compliance monitoring
OpenAI
Audio transcription and AI processing where applicable
Subject to provider API configuration
API data controls, encryption in transit, data not used for model training by default unless opted in
Microsoft Azure
OCR, document intelligence, image processing and related cloud processing
Subject to service configuration
Microsoft cloud compliance programs, encryption, access controls and data protection controls
Gamma Tech, Inc.
Optional presentation generation for incident learning packs
Subject to provider configuration
SOC 2 Type II resources, TLS, product security controls and data retention procedures
Render
Application hosting where used for specific deployments
Subject to deployment configuration
SOC 2 Type 2, ISO 27001, encrypted traffic and platform security controls
Australian sovereign deployment
For customers who require Australian data sovereignty. Hosting, storage, backups, logging and AI inference all run in Australian regions. Tenants are routed to this deployment from server-side configuration after sign-in, and there is no data path to the standard deployment.
| Subprocessor | Purpose | Region | Data Handled | References |
|---|---|---|---|---|
| Microsoft Azure Azure Container Apps |
Application runtime: web app, API and media processing worker | Australia East (australiaeast) | All request and response payloads, processed in memory only | |
| Supabase Postgres and managed backups |
Primary database, audit trail and backups | Sydney, Australia (ap-southeast-2) | Cases, tool completions, transcriptions and the audit trail. Field-level encryption on result, prompt and content fields. Encrypted backups with point-in-time recovery | |
| Wasabi Technologies S3-compatible object storage |
Evidence file storage | Sydney, Australia (ap-southeast-2) | Uploaded images, audio, video and generated documents | |
| Amazon Web Services Amazon Bedrock (Anthropic Claude) |
AI reasoning, investigation analysis and generated outputs | Sydney, Australia (ap-southeast-2), Australia-only inference profiles | Prompts and evidence text. Zero retention, not used for model training | |
| Microsoft Azure Azure AI Speech |
Audio transcription | Australia East (australiaeast) | Interview and site audio, held only for the duration of the transcription call | |
| Microsoft Azure Azure AI Vision |
Handwriting OCR | Australia East (australiaeast) | Scanned statements and field notes, held only for the duration of the request | |
| Microsoft Azure Azure Monitor / Log Analytics |
Application logging and monitoring | Australia East (australiaeast) | Operational logs from the application runtime, in a workspace bound to the Australian environment |
Microsoft Azure · Azure Container Apps
Application runtime: web app, API and media processing worker
Australia East (australiaeast)
All request and response payloads, processed in memory only
Supabase · Postgres and managed backups
Primary database, audit trail and backups
Sydney, Australia (ap-southeast-2)
Cases, tool completions, transcriptions and the audit trail. Field-level encryption on result, prompt and content fields. Encrypted backups with point-in-time recovery
Wasabi Technologies · S3-compatible object storage
Evidence file storage
Sydney, Australia (ap-southeast-2)
Uploaded images, audio, video and generated documents
Amazon Web Services · Amazon Bedrock (Anthropic Claude)
AI reasoning, investigation analysis and generated outputs
Sydney, Australia (ap-southeast-2), Australia-only inference profiles
Prompts and evidence text. Zero retention, not used for model training
Microsoft Azure · Azure AI Speech
Audio transcription
Australia East (australiaeast)
Interview and site audio, held only for the duration of the transcription call
Microsoft Azure · Azure AI Vision
Handwriting OCR
Australia East (australiaeast)
Scanned statements and field notes, held only for the duration of the request
Microsoft Azure · Azure Monitor / Log Analytics
Application logging and monitoring
Australia East (australiaeast)
Operational logs from the application runtime, in a workspace bound to the Australian environment
Regions, locations and security measures may vary based on customer and deployment configuration. MineGuard AI may update this register from time to time as subprocessors are added, removed or changed.