Subprocessors

Third-party service providers we use to deliver and improve our services.

Last updated: January 15, 2025

About Our Subprocessors

To provide our services, we engage certain third-party subprocessors to process customer data on our behalf. We carefully select these providers based on their security practices, compliance certifications, and data protection commitments.

We will notify customers at least 30 days in advance before adding or replacing any subprocessor. Customers can object to a new subprocessor by contacting us within the notification period.

Our Subprocessor Policies

Due Diligence
We carefully vet all subprocessors to ensure they meet our security and privacy standards.
Data Protection
All subprocessors are required to maintain appropriate technical and organizational security measures.
Location Transparency
We clearly document where your data is processed and stored by each subprocessor.

Current Subprocessors

Vercel Inc.
Hosting & Infrastructure
Purpose: Application hosting, CDN, and edge computing
Data Location: United States, Europe, Asia-Pacific
Website: vercel.com
Added: January 2024
Amazon Web Services (AWS)
Cloud Infrastructure
Purpose: Database hosting, storage, and backup services
Data Location: United States, Europe
Added: January 2024
Supabase Inc.
Database Services
Purpose: PostgreSQL database hosting and management
Data Location: United States, Europe
Website: supabase.com
Added: January 2024
Stripe, Inc.
Payment Processing
Purpose: Payment processing and billing management
Data Location: United States, Europe
Website: stripe.com
Added: January 2024
Resend Inc.
Email Delivery
Purpose: Transactional email delivery
Data Location: United States
Website: resend.com
Added: March 2024
Upstash, Inc.
Caching & Rate Limiting
Purpose: Redis caching and rate limiting services
Data Location: United States, Europe
Website: upstash.com
Added: February 2024
Sentry
Error Tracking
Purpose: Application monitoring and error tracking
Data Location: United States
Website: sentry.io
Added: January 2024
PostHog Inc.
Analytics
Purpose: Product analytics and feature flags
Data Location: United States, Europe
Website: posthog.com
Added: April 2024
Clerk Inc.
Authentication
Purpose: User authentication and management (optional)
Data Location: United States
Website: clerk.com
Added: May 2024
Subprocessor Change Notifications

We will notify all customers via email at least 30 days before adding a new subprocessor or making material changes to an existing subprocessor's data processing activities.

If you object to a new subprocessor, you may terminate your agreement with us without penalty by providing written notice within 30 days of the notification.

To receive notifications, ensure your account email is up to date and you have not unsubscribed from service announcements.

Related Documentation

Data Processing Agreement
Our GDPR-compliant DPA
Privacy Policy
How we handle personal data
Security
Our security measures

Questions About Subprocessors?

Contact our privacy team for more information about our subprocessors.