Sub-Processors
We use a limited set of third-party service providers to operate the Services. Each has contractual confidentiality and data-protection obligations. For full details, see our Privacy Policy.
| Sub-Processor | Purpose | Data Shared | Location |
|---|---|---|---|
| Supabase (via AWS) | Database hosting, authentication, storage | Account, Workspace, encrypted API keys, Request Metadata, Billing | United States |
| Cloudflare | Edge routing, request caching, KV storage, DDoS protection | Request Metadata, API key hashes, rate-limit state | Global (edge network) |
| Stripe | Payment processing | Billing Information, email | United States |
| Railway | Backend API hosting | Account, Request Metadata, Billing | United States |
| Vercel | Frontend hosting | Session cookies, IP address | United States |
| Upstash | Async job queues (billing events, metrics ingestion) | Request Metadata, credit transactions | United States |
| Resend | Transactional email delivery | Email address, message content | United States |
We maintain this sub-processor list and update it when changes occur. We communicate material sub-processor changes to business customers per the DPA.