Subprocessors
Last updated: 19 June 2026
The following third-party companies process personal data on our behalf in order to operate the service. All subprocessors are bound by Data Processing Agreements and transfer data outside the EU/EEA under Standard Contractual Clauses or other approved transfer mechanisms.
| Subprocessor | Purpose | Region | DPA |
|---|---|---|---|
| Vercel Inc. | Hosting, edge delivery, privacy-friendly analytics | USA | View DPA |
| Supabase Inc. | Authentication, Postgres database, file storage | EU / USA | View DPA |
| Stripe, Inc. | Payment processing | Global | View DPA |
| Replicate, Inc. | AI inference (prompt → image generation) | USA | View DPA |
| Functional Software, Inc. (Sentry) | Error monitoring and session replay | USA | View DPA |
| Resend | Transactional and newsletter email | USA | View DPA |
| Upstash | Redis-based rate limiting | Global | View DPA |
| Google LLC | OAuth identity provider (Sign in with Google) | Global | View DPA |
We will update this page within 30 days of adding or removing a subprocessor. Existing customers will be notified of material subprocessor changes by email.