Last updated 30 August 2026
The third parties that hold or process data on Olilo's behalf. Every entry is here because the code actually calls it.
| Provider | What it does | Where | What it touches |
|---|---|---|---|
| Amazon Web Services | Runs the application and holds the database, file storage, encryption keys and logs. | Sydney, Australia (ap-southeast-2) | Everything in your workspace: accounts, documents, matters, messages and the audit trail. |
| Amazon Bedrock | Serves the AI models that draft documents and answer questions. | Australian regions | The text of the request being answered, which can include the content of a document you attached or a matter you are working on. Requests are not used to train models. |
| Microsoft Graph | Sends outbound email from Olilo: the message that goes out when a workspace is created, the password reset link, and the digest of matters needing attention. | Determined by the Microsoft tenant the sender account belongs to. | The recipient's name and email address, and the text of the message. The attention digest carries matter details: the reference of each matter, the name of the person it is about, and which recorded window is closing or has passed. The allegations, notes, evidence and documents held on a matter are never emailed. |
One optional feature, live web research, would send a de-identified question to a provider outside this list. It is switched off and no request has ever been made through it. This page will be updated before it is ever switched on.