A live registry of every subprocessor we use, what they do, where they operate, and the DPAs we have with each. Audited monthly. Notified within 30 days of any change.
| Subprocessor | Category | Purpose | Region | Since | DPA | Status |
|---|---|---|---|---|---|---|
AW Amazon Web Services (AWS) aws.amazon.com | Infrastructure | Hosting, databases, storage, AI inference, backups, monitoring | Frankfurt (eu-central-1) primary, Ireland (eu-west-1) DR | 2025 | View DPA → | Active |
CI Cloudflare, Inc. cloudflare.com | Infrastructure | DNS, CDN, edge proxy, webhook ingestion | Global edge | 2025 | View DPA → | Active |
VI Vercel Inc. vercel.com | Infrastructure | Frontend hosting (dashboards, marketing site) | EU regions | 2025 | View DPA → | Active |
OL OpenAI, L.L.C. openai.com | AI & ML | LLM inference (fallback) — customer support responses, classification | US (or via Bedrock in EU) | 2025 | View DPA → | Active |
AP Anthropic, PBC anthropic.com | AI & ML | LLM inference (fallback path) | US (or via Bedrock in EU) | 2025 | View DPA → | Active |
AB Amazon Bedrock (subset of AWS) aws.amazon.com/bedrock | AI & ML | LLM inference (primary) — EU data residency | Frankfurt | 2025 | View DPA → | Active |
O OpenRouter openrouter.ai | AI & ML | LLM inference (fallback) | Global | 2025 | View DPA → | Active |
BS Better Stack (Logtail / Logflare) betterstack.com | Observability | Logs + Sentry-compatible error tracking | EU (Frankfurt) | 2025 | View DPA → | Active |
I Instatus instatus.com | Observability | Status page hosting | EU region | 2025 | View DPA → | Active |
PI PostHog Inc. posthog.com | Observability | Product analytics | EU region | 2025 | View DPA → | Active |
MP Meta Platforms Ireland Ltd. developers.facebook.com | Communications | WhatsApp Business API, Instagram, Facebook Messenger | EU | 2025 | View DPA → | Active |
TT TikTok Technology Ltd. developers.tiktok.com | Communications | TikTok messaging + comments API | EU / global | 2025 | View DPA → | Active |
AS Amazon SES (subset of AWS) aws.amazon.com/ses | Communications | Transactional email delivery (password resets, invitations, notifications) | Frankfurt (eu-central-1) | 2025 | View DPA → | Active |
SI Shopify Inc. shopify.com | Integrations | E-commerce platform integration | Customer's chosen region | 2025 | View DPA → | Active |
WA WooCommerce / Automattic Inc. woocommerce.com | Integrations | E-commerce platform integration | Customer's WooCommerce host | 2025 | View DPA → | Active |
II Inngest, Inc. inngest.com | Integrations | Workflow orchestration | EU region | 2025 | View DPA → | Active |
UI Upstash, Inc. upstash.com | Integrations | Vector database (RAG for AI search) | EU region | 2025 | View DPA → | Active |
NI Neon, Inc. neon.tech | Integrations | PostgreSQL hosting (legacy, being migrated to AWS Aurora) | EU region | 2025 | View DPA → | Active |
LG LangFuse GmbH langfuse.com | Integrations | AI observability (self-hosted on AWS Phase 2) | Frankfurt | 2025 | View DPA → | Active |
Enterprise customers get a 30-day advance notice on every new subprocessor — including the rationale and risk assessment. Email + RSS feed.