Back to home
Our subprocessors. In public. Without NDA.
Every subprocessor named. No email gate. No NDA. No compliance score calculator. Here they are — we update this when something changes.
| Vendor | Purpose | Data region | Data type |
|---|---|---|---|
| Vercel | Hosting (web + app frontend) | EU (Frankfurt) / US (multi-region) | Application logs, IP |
| Supabase | Database, auth, storage | EU (Frankfurt) | User data, embeddings, sessions |
| OpenAI | LLM inference | US | Chat content (in-flight) |
| Anthropic | LLM inference | US | Chat content (in-flight) |
| OpenRouter | LLM routing layer | US | Chat content (in-flight metadata) |
| Stripe | Billing | US (DPA SCC) | Payment metadata, billing email |
| Resend | Transactional emails | EU | Email metadata, recipient |
| Firecrawl | Knowledge ingestion (web scrape) | US | Public URL targets |
| Microsoft 365 | Internal ops (not customer-facing) | EU | Internal admin only |
Last updated: 2026-05-01