Legal
Sub-processors
Third-party vendors that process customer data on our behalf. Last updated July 8, 2026.
Current sub-processors
| Vendor | Purpose | Data location |
|---|---|---|
| Supabase | Auth + Postgres database + storage | US East (aws-us-east-1) |
| Vercel | Web hosting + CDN | Global edge |
| Freemius | Payments: Merchant of Record (paid plans only) | Global (PCI DSS) |
| Postmark | Transactional + newsletter email | US |
Changes to this list
We'll notify DPA-signed customers by email at least 30 days before adding a new sub-processor.
Data residency
Enterprise customers with EU-residency requirements: contact us. EU-region Supabase deployment available on the Business plan.