Current pre-release list · July 9, 2026
| Vendor/category | Purpose | Data |
|---|---|---|
| DigitalOcean | Cloud infrastructure, networking, storage, and managed data services | Account, request metadata, encrypted service data, and transient API content as needed to host WebikAI |
| Stripe | Subscription, checkout, top-up, invoicing, fraud, and payment processing | Account, transaction, tax, and payment-reference data; Stripe receives payment-card data directly |
| PostHog | Limited public-page product analytics | Public page path without query string, event name, device/browser and network information; disabled on app and token routes |
| Transactional email provider | Account verification, password reset, billing, security, and service email | Email address, message content, and delivery metadata; provider is deployment-specific |
| Selected AI providers and aggregators | Fulfill API requests under customer policy, credentials, and route eligibility | Prompt, attachments, parameters, and related metadata needed to serve the request |
The exact AI provider or aggregator varies by model, key, managed eligibility, account policy, request capabilities, and routing. Those companies may act as subprocessors, independent controllers, or third parties depending on the connection mode and contract. BYOK relationships are generally governed directly by the customer’s provider agreement.
WebikAI may update this list as services change and will provide notice where a signed agreement or applicable law requires it. Contact [email protected] for the current vendor details, a DPA request, or an objection process. A public page is not itself a executed DPA or transfer mechanism.