← Trust Center Subprocessors 14 parties currently authorised to process data on our behalf under Art. 28 GDPR. Material changes are announced 30 days in advance to workspace owners. Subscribe to the JSON manifest below to automate that monitoring.
Manifest version: 2026.07.07 · Published: 2026-07-07
Download JSON manifest →
Supabase, Inc. Last reviewed: 2026-04-12
Purpose Primary application database, Auth (OAuth/SSO), object storage.
Region EU-West (Frankfurt) / eu-central-1 Data categories account authentication credentials (hashed) tenant business data audit logs Vercel, Inc. Last reviewed: 2026-04-12
Purpose Application hosting, edge network, serverless functions.
Region EU (fra1) Data categories IP address user-agent request metadata Stripe Payments Europe, Ltd. Last reviewed: 2026-03-21
Purpose Subscription billing, invoicing, tax compliance.
Region Ireland (EEA) + USA (SCCs Module 4) Data categories billing address tax id payment method (tokenised) invoice line items OpenAI Ireland Ltd. Last reviewed: 2026-05-02
Purpose LLM inference (GPT-4 class) for AI features when routed to OpenAI.
Region Ireland (EEA) — opted out of training Data categories prompt content user-supplied context Anthropic, PBC Last reviewed: 2026-05-02
Purpose LLM inference (Claude class) for AI features when routed to Anthropic.
Region USA (SCCs) — opted out of training, 30-day retention Data categories prompt content user-supplied context OpenRouter, Inc. Last reviewed: 2026-05-02
Purpose Multi-model LLM gateway for cost-optimised inference.
Region USA (SCCs) Resend (Drip, Inc.) Last reviewed: 2026-04-30
Purpose Transactional email delivery (workspace invites, password reset, drip).
Region EU + USA (SCCs) Data categories email address name message body Functional Software, Inc. (Sentry) Last reviewed: 2026-04-12
Purpose Error + performance telemetry for application code.
Region EU (Frankfurt) Data categories error message stack trace anonymous user id Langfuse GmbH Last reviewed: 2026-04-30
Purpose AI request tracing for prompt + latency observability.
Region EU (Frankfurt) Data categories prompt content model output trace metadata Mistral AI SAS Last reviewed: 2026-07-07
Purpose LLM inference (Mistral models) — default for DSGVO-strict workspaces.
Region EU (France) Data categories prompt content model output Upstash, Inc. Last reviewed: 2026-07-07
Purpose Redis cache, BullMQ job queues, rate-limit counters.
Region EU (Frankfurt) Data categories session metadata queued job payloads (transient) Railway Corp. Last reviewed: 2026-07-07
Purpose Worker compute for BullMQ workflow consumers and long-running jobs.
Region EU (Amsterdam) Data categories workflow step payloads (in transit / transient) Amazon Web Services EMEA SARL Last reviewed: 2026-07-07
Purpose Encrypted database backups, customer file storage (S3), key management (KMS).
Region EU (eu-central-1, Frankfurt) Data categories encrypted DB backups file objects Cloudflare, Inc. Last reviewed: 2026-04-12
Purpose DDoS protection + WAF in front of orconic.com (Vercel-managed).
Region Global anycast Data categories IP address request metadata