Subprocessors

Current subprocessors

These providers process data on our behalf under data processing agreements. We keep this list short on purpose — every additional provider is additional surface area.

• —Vercel (United States) — website and application hosting
• —Supabase (United States) — database and authentication for the product
• —Paddle (United Kingdom) — merchant of record: payments, invoices, sales tax/VAT
• —Cloudflare (global) — DNS, CDN and traffic protection
• —Resend (United States) — transactional email (briefs and account messages)
• —PostHog (United States) — website and product analytics, loaded only after consent
• —Upstash (United States) — rate limiting infrastructure
• —Inngest (United States) — scheduled background jobs (e.g. the Monday run)
• —Managed AI infrastructure (United States) — generation of the written narrative over engine-verified figures; accounting data sent is limited to what the narrative requires

Changes to this list

We notify customers by email before adding or replacing subprocessors that handle accounting data. The changelog records every update to this page.