| Vendor | Purpose | Data | Location |
|---|---|---|---|
| AWS (Amazon Web Services) | Infrastructure hosting (EU + US clusters) | All customer event data, application data | EU (eu-central-1, eu-west-1) + US (us-east-1) |
| Cloudflare | CDN, DNS, DDoS protection, edge workers | Edge metadata (no payload PII) | Global edge network |
| Vercel | Marketing site and dashboard hosting | Anonymous web analytics | Global edge network |
| Stripe | Billing and payment processing | Billing email, billing address, payment method | US + EU |
| Postmark | Transactional email (account, billing, support) | Account email, message content | US |
| PostHog (self-hosted) | Product analytics on the marketing site | Anonymous web events (with consent only) | EU (our self-hosted instance) |
| Sentry | Error monitoring | Application error metadata (no payload PII) | EU |
| Anthropic | AI assistant for support and operations (Paperclip) | Aggregated support metadata, no raw customer event data | US |
Forwarding sub-processors (you control these)
When you connect an ad platform or CRM integration, that platform becomes a sub-processor for the data you forward to it. You configure these integrations; we do not push data to them without your explicit setup. Examples: Meta CAPI, Google Ads, TikTok Events API, HubSpot, Klaviyo, ActiveCampaign.