Sub-processors
Every third-party provider that processes customer data. Updated in real time.
| Vendor | Service | Location | Onboarded | DPA |
|---|---|---|---|---|
| Amazon Web Services, Inc. | Compute, storage, primary DB hosting | Singapore (ap-southeast-1) | 2025-01-15 | DPA |
| Vercel Inc. | Web app hosting + edge CDN | USA (with EU edge points) | 2025-01-15 | DPA |
| Neon Inc. | Postgres database (managed) | USA | 2025-02-08 | DPA |
| Resend Inc. | Transactional email | USA | 2025-03-12 | DPA |
| Stripe, Inc. | Card payment processing | USA | 2025-04-01 | DPA |
| Paddle.com Market Limited | Card + bank transfer (Merchant of Record) | UK | 2025-04-01 | DPA |
| Cloudflare, Inc. | DDoS protection, WAF, edge cache | Global edge network | 2025-05-20 | DPA |
Enterprise customers have 30 days to object when we add a new sub-processor — see DPA §6.4.