# Trust Center — Agent Delivery Network — ADN ISO 27001 In progress GDPR role Processor DPA package EU SCCs + UK Addendum Sub-processors 3 providers Sub-processor list All infrastructure providers that process personal data on our behalf. Incorporated as Annex III of the DPA. Download Authorised sub-processors for ADN infrastructure and customer data processing. This list corresponds to Annex III of our Data Processing Agreement. Sub-processor Service Data processed Location Supabase Supabase, Inc. PostgreSQL database, authentication, REST API Customer accounts, domain configuration, gateway request metadata, usage aggregates, legal acceptance records, agent registry EU / US Cloudflare Cloudflare, Inc. Edge compute, CDN, DNS, object storage, page rendering, automated deployment Edge gateway traffic (IP address, User-Agent, request path at request time), application hosting, rendered page content, build and deploy pipeline Global Stripe Stripe, Inc. Payment processing, subscription billing, Customer Portal Billing contact details, Stripe customer and subscription identifiers, payment method metadata (card details held by Stripe) US / EU Last updated: 2026-08-13 Data Processing Agreement Includes EU Standard Contractual Clauses (Module 2) and the UK International Data Transfer Addendum. Download DPA package Version 2026-08-13 Show full document Data Processing Agreement This Data Processing Agreement ("DPA") forms part of the agreement between Customer (the "Controller") and Snap Sourcer Limited (trading as Agent Delivery Network (ADN)) ("Processor", "ADN") for the ADN dashboard and gateway services. This DPA incorporates by reference the EU Commission Standard Contractual Clauses (Decision 2021/914, Module Two: Controller to Processor) and the UK International Data Transfer Addendum to those Clauses, both included in this package. 1. Definitions Terms used herein have the meanings in the UK GDPR / EU GDPR and the SCCs. "Personal Data", "Processing", "Controller", "Processor", "Data Subject", and "Supervisory Authority" have the meanings in applicable Data Protection Law. 2. Subject matter and duration Processor will process Personal Data on behalf of Controller for the duration of the subscription and until deletion in accordance with this DPA. 3. Nature and purpose of processing Processor classifies and routes machine traffic to Controller's domains, enforces configured policies, provides usage analytics, and maintains security and availability of the gateway. 4. Types of Personal Data Depending on Controller configuration and incoming traffic, this may include: • IP addresses • User-Agent strings and Accept headers • Request paths and timestamps • Bot-management and device signals from the CDN • Hashed authentication tokens (site/agent tokens) Processor does not intentionally collect special categories of data. 5. Categories of data subjects Visitors and automated agents accessing Controller's domains; Controller's authorised users (account administrators). 6. Controller instructions Processor shall process Personal Data only on documented instructions from Controller, including via control-plane configuration, unless required by law. Controller instructs Processor to perform the processing described in Annex I. 7. Confidentiality Processor ensures persons authorised to process Personal Data are bound by confidentiality obligations. 8. Security Processor implements measures in Annex II (Technical and Organisational Measures). Processor will assist Controller with security incident notification per clause 9. 9. Sub-processors Controller provides general authorisation for sub-processors listed in Annex III . Pr … Privacy Policy How ADN processes personal data for website visitors and customers. Download Version 2026-08-13 Show full document 1. Who we are Snap Sourcer Limited ("ADN", "we", "us") operates Agent Delivery Network — a cooperative gateway for machine traffic. Our website is https://www.agent-delivery.network; the customer dashboard is https://app.agent-delivery.network. We are registered in England (company number 15295095). Our registered office is 9 St. Georges Yard, Farnham, England, GU9 7LW. For privacy enquiries contact privacy@agent-delivery.network. Our Data Protection Officer can be reached at dpo@agent-delivery.network. 2. Scope and roles This Privacy Policy explains how we process personal data when you: • visit our marketing website or use the free offload calculator; • register for an ADN account or use the dashboard; • register an agent in the public directory; or • interact with ADN as a representative of a customer organisation. Website visitors and calculator users: we act as controller for the personal data described in section 3.1. Customer organisations: when you configure ADN to process traffic on your domains, you are the controller for end-user and visitor data processed at the edge. ADN acts as your processor for that traffic data. Our Data Processing Agreement (DPA), including EU Standard Contractual Clauses and the UK International Data Transfer Addendum, governs that processing and is available in the Trust Center. 3. Personal data we collect 3.1 Website visitors and marketing tools Data Source Purpose Legal basis (GDPR) Email address Offload calculator form (optional) Send the full offload report; sales follow-up Consent Scanned URL and derived scan metrics Offload calculator Provide analysis; improve product Legitimate interests / consent for follow-up IP address Server and edge logs Security, abuse prevention, rate limiting Legitimate interests Device and browser signals (User-Agent, Accept headers) HTTP requests Security, compatibility, analytics aggregates Legitimate interests Theme preference localStorage ( adn-theme ) Remember UI preference Legitimate interests We do not use third-party advertising or analytics trackers on our sites. 3.2 Customer account holders Data Purpose Legal basis Email address Authentication (magic link), account communication Contract Name (optional) … Cookie Policy Cookies and local storage used on our websites and apps, and how to manage your choices. Download Version 2026-08-13 Show full document 1. Introduction This Cookie Policy explains how Snap Sourcer Limited ("ADN", "we", "us") uses cookies and similar technologies on: • https://www.agent-delivery.network (marketing site) • https://app.agent-delivery.network (customer dashboard) • https://registry.agent-delivery.network (agent registry) It should be read together with our Privacy Policy . For questions contact privacy@agent-delivery.network. 2. What are cookies and similar technologies? Cookies are small text files stored on your device when you visit a website. Similar technologies we use include: • localStorage — browser storage that persists until cleared (we use this for theme preference and cookie consent records) • Session storage — temporary browser storage for the current tab session We do not use third-party advertising cookies, social-media pixels, or cross-site tracking technologies. 3. How we use cookies 3.1 Strictly necessary (essential) These are required for the service to function. Under UK/EU law they do not require consent, but we disclose them here for transparency. Name / key Type Purpose Duration Sites Session authentication cookies Cookie Keep you signed in to the dashboard (magic-link session) Session / up to 7 days app cf_oauth_state Cookie CSRF protection during zone installation OAuth 10 minutes app adn-cookie-consent Cookie + localStorage Record your cookie consent choice and policy version (shared across ADN subdomains) 12 months all 3.2 Functional (preferences) Name / key Type Purpose Duration Sites adn-theme Cookie + localStorage Remember your light/dark theme choice (shared across ADN subdomains when you accept functional cookies) Until cleared all Functional storage is only applied after you accept cookies via our banner (or where permitted as strictly necessary for core UI operation in your jurisdiction). 3.3 Analytics and marketing We do not set analytics or marketing cookies. We do not use Google Analytics, Meta Pixel, or similar third-party trackers on our properties. Server-side logs (including IP address and User-Agent) may be processed for security and abuse prevention — see our Privacy Policy. These are not b … Terms of Service Governs use of the ADN dashboard. Download Version 2026-08-13 Show full document 1. Agreement These Terms of Service ("Terms") are between Snap Sourcer Limited (trading as Agent Delivery Network (ADN)) ("ADN") and the organisation or individual registering for an account ("Customer", "you"). By creating an account or using the dashboard at https://app.agent-delivery.network, you agree to these Terms and our Privacy Policy. 2. Service description ADN provides a gateway and dashboard that classifies machine traffic, applies routing policies, and offloads origin load for configured domains. Features vary by subscription tier. 3. Customer responsibilities You agree to: • provide accurate registration information; • keep site tokens and integration credentials confidential; • configure policies consistent with your legal obligations to your visitors and users; • ensure you have a lawful basis to direct traffic through ADN; • not use the service for unlawful, abusive, or security-threatening activity; • comply with applicable export, sanctions, and anti-abuse laws. You remain the controller for personal data relating to visitors to your domains. ADN processes that data as your processor under the DPA. 4. Acceptable use Prohibited uses include: attempting to bypass security controls; distributing malware; infringing intellectual property; scraping ADN infrastructure; impersonating other agents; or interfering with service availability. We may suspend or terminate access for material breach, abuse, or non-payment. 5. Subscriptions and billing Paid plans are billed via our authorised payment sub-processor. Fees are non-refundable except where required by law. Usage overages may apply when enabled. We may change pricing with 30 days' notice. 6. Intellectual property ADN retains all rights in the platform, documentation, and branding. You retain rights in your content and domain configuration. You grant ADN a limited licence to process your content solely to provide the service. 7. Confidentiality Each party will protect the other's confidential information with reasonable care. Site tokens, API keys, and non-public configuration are confidential. 8. Warranties and disclaimers The service is provided as is to the extent permitted by law. We do not warrant uninterrupted or error-free operation. ADN is not responsible for third-party platforms (e.g. your CDN or hosting provider, your origin). … Security overview Summary of technical and organisational controls for procurement reviews. Version 2026-08-13 Show full document Security at ADN Snap Sourcer Limited (trading as Agent Delivery Network (ADN)) is building toward ISO/IEC 27001 certification. This overview summarises controls relevant to customers evaluating ADN for procurement. Architecture • Edge-first processing: Classification and policy enforcement run at the edge; customer origins are not exposed to raw agent traffic beyond configured policies. • Tenant isolation: Customer configuration, billing, and credentials are stored in a managed PostgreSQL database with row-level security enforcing tenant isolation. • Token-based domain auth: Each domain receives a unique site token; only a SHA-256 hash is stored. Tokens are verified on every gateway request. • Fail-open design: When quotas are exceeded or the gateway errors, traffic passes to the customer origin rather than blocking legitimate visitors. Data protection Control Implementation Encryption in transit TLS 1.2+ for all public endpoints Encryption at rest Database encryption at rest; OAuth tokens encrypted at application layer Access control RBAC (owner/admin/member); row-level security on all tenant tables Log retention Gateway request logs purged after 30 days (automated); no IP in stored logs Aggregates only Dashboard analytics use traffic-class aggregates, not raw visitor identifiers Secret management Environment secrets via managed vaults; no keys in source control Application security • Security headers (HSTS, CSP, X-Frame-Options, nosniff) on all web properties • SSRF protections on server-side URL fetching (scan, preflight) • Rate limiting on public API endpoints • Payment provider webhook signature verification • Third-party zone OAuth CSRF state validation • Agent API keys verified against stored hashes at the gateway Infrastructure • Hosted on certified managed cloud services (see sub-processor list) • CI/CD via automated pipelines with secret scanning • Dependency updates via lockfile and automated CI builds Incident response Security issues can be reported to security@agent-delivery.network. We will acknowledge reports within 2 business days and notify affected customers of confirmed breaches per our DPA. Compliance documents Available in the Trust Center: • Privacy Policy • Data Processing Agreement (with EU SCCs and UK Addendum) • Sub- … Compliance contacts Reach the right team for privacy, data protection, and security matters. privacy@agent-delivery.network — Privacy enquiries and data subject requests dpo@agent-delivery.network — Data Protection Officer security@agent-delivery.network — Vulnerability reports and security incidents Full legal documentation, sub-processor list, and DPA downloads are available on this page. Customers can accept agreements in the dashboard . DPA bundle · v 2026-08-13 · 10159 bytes Ask ADN