(04)(Sub-processors & Providers)© 2026

Sub-processor & Provider List

Third parties that may process client materials or client personal data when ARDE provides creative content and AI video production services. Published pursuant to Section 5 of the ARDE DPA.

Version 1.0 Last updated July 14, 2026 Change notice 30 days in advance Subscribe contact@ardeagency.com
Change notification. ARDE will notify clients with an executed DPA at least 30 days before adding or replacing a sub-processor that processes their personal data. To receive notices, write to contact@ardeagency.com. Engagement-specific lists (restricted to the providers actually used for a given client) are available on request.

AI generation platforms

Client production materials (reference images, product assets, prompts) are processed by these platforms only to generate content for the engagement. ARDE performs client work in enterprise or business-tier workspaces whose agreements exclude client inputs and outputs from model training, where the provider offers such terms.

ProviderServiceData processedSafeguards
Higgsfield, Inc. (primary) Enterprise generative video & image platform (aggregated frontier models) Prompts, reference images, product assets, generated outputs Higgsfield Enterprise agreement — no-training guarantee, zero rights claimed over content, full data deletion. Detail below.
KIE.ai Unified API access to generative models (video/image) for selected pipelines Prompts, reference images, generated outputs API-based processing; no client identity data included in prompts
Anthropic Large language models (creative development, production tooling) Prompts and context necessary for the task Commercial API — inputs/outputs not used to train models by default
OpenAI Language/image models for selected pipelines Prompts and assets necessary for the task Commercial API — training opt-out configuration
ElevenLabs, Inc. Generative voice and audio (voiceover, narration, voice effects) Scripts and text; voice reference audio only with the documented consent of the data subject SOC 2 Type II · public DPA · training opt-out enabled in account settings · voice cloning only with verified consent (model release) · ElevenLabs trust center

Higgsfield Enterprise — platform commitments (primary generation platform)

ARDE produces client content exclusively within its Higgsfield Enterprise workspace, operated by Higgsfield, Inc. (United States; EU representative: DataRep, Rouen, France). The Enterprise tier is governed by a separate enterprise agreement whose terms supersede Higgsfield's standard consumer Terms of Use — a distinction that matters, because the standard consumer terms permit content to be used for model training, which is precisely why ARDE contracts and works at the Enterprise tier for all client production. ARDE's Enterprise plan includes the following written commitments from Higgsfield:

CommitmentWritten Enterprise term
No-training guarantee"Client uploads, prompts, and generated assets are never used to train Higgsfield or our model partners."
Zero rights claimed"Zero rights claimed over anything created on the platform." Generated assets are cleared for commercial use; ARDE's clients receive them under the IP assignment in ARDE's Terms §5.
Data deletion"All data deleted, no retention on our side" — client production data is not retained by Higgsfield after deletion.
Workspace securityPrivate enterprise workspaces with granular access control and SSO; SOC 2-aligned controls and GDPR compliance per Higgsfield's enterprise documentation.
Dedicated supportEnterprise-only support channel with direct escalation to Higgsfield's engineering team for production issues.

Consult Higgsfield directly: Enterprise platform · Trust, Safety & Platform Policies · Terms of Use · Privacy Policy. A copy of ARDE's Higgsfield Enterprise terms is available to client legal teams under NDA via contact@ardeagency.com.

Licensed software & asset libraries

Adobe Creative Cloud. ARDE's entire team operates on active commercial Adobe Creative Cloud licenses for the post-production of deliverables (editing, compositing, VFX, color, retouching and design — Premiere Pro, After Effects, Photoshop, Illustrator, among others). No deliverable is produced with unlicensed software.

Envato Elements — music and sound effects. ARDE maintains an active commercial subscription to Envato Elements (Envato Pty Ltd, Australia). Envato does not process client data — it is an inbound source of commercially licensed assets integrated into deliverables. Terms relevant to a client legal review:

AspectLicense condition
CoverageWorldwide, non-exclusive commercial license permitting use in client work (advertising video, campaigns, digital and social content).
Per-project registrationEach asset is registered/licensed for one specific end product ("single use per end product"); a new use in another project generates a new license registration. ARDE retains the license record of every delivered piece.
Client hand-overOn delivery of the end product, the client receives a limited sublicense of the asset as part of the deliverable, per Envato's terms.
Limit — broadcastThe Envato Elements music license does not cover broadcast use (TV/radio). If a deliverable is destined for broadcast, ARDE discloses this and secures a broadcast-suitable music license for that project (quoted in the applicable SOW).

Consult Envato directly: Envato Elements license terms · License FAQ.

Infrastructure, storage and collaboration

ProviderServiceData processedLocation
Google (Workspace)Corporate email, document collaboration, project storageBusiness communications, project filesUS / global
CloudflareCDN, security, object storage (R2) for asset deliveryProject assets in transit/at rest, traffic metadataGlobal network
Hetzner Online GmbHCloud servers for internal production toolingProcessing workloads, project assetsEU (Germany / Finland)
SupabaseManaged database/storage for internal toolingProject and workflow dataEU / US
GitHub (Microsoft)Code and configuration repositories, static hostingProduction tooling (no client personal data by policy)US
FigmaDesign collaboration and presentationsDesign files, brand assets shared for reviewUS

What ARDE does not do

Each sub-processor operates under contractual terms with data-protection obligations consistent with the ARDE DPA. ARDE maintains an internal vendor-assessment record and reviews providers periodically. Providers listed may vary per engagement; a client may request the exact provider set used for its projects.

Contact

ARDE AGENCY S.A.S. · NIT 901.856.077-9 · Cl. 6A # 16-45, Ed. Guayacán de la Calera, Medellín, Antioquia, Colombia
Contact: contact@ardeagency.com