Subprocessors
Infrastructure and service vendors used to operate Application.
Last updated 2026-09-01
Draft for counsel — not legal advice. Placeholders such as [Legal entity name], [Jurisdiction], and [privacy@…] must be confirmed before publication.
Overview
[Legal entity name] uses the vendors below to host and operate Application. This list is limited to subprocessors evidenced by the current product architecture. Locations may vary by vendor region — confirm production regions with counsel before publication.
Current Subprocessors
| Name | Purpose | Location | Categories |
|---|---|---|---|
| PostgreSQL host | Primary application database | [Confirm with product] | Account, Business, CRM/ops, billing metadata |
| Redis | Session cache and short-lived application state | [Confirm with product] | Session identifiers and related auth state |
| Backblaze B2 | Object / file storage (S3-compatible SDK) | [Confirm with product] | Uploaded files and related object metadata |
| SMTP / Nodemailer | Transactional email delivery | [Confirm with product] | Email addresses and message content for verification, resets, invites |
| Stripe | Checkout, subscriptions, and payment processing | Stripe regions (global) | Billing identity, plan, payment references |
| Formspree | Public contact and sales form delivery | Formspree regions | Name, email, message content from contact forms |
Optional Business Providers
A Business may optionally configure its own outbound email provider. When enabled, that provider processes message data on the Business’s instructions:
| Name | Purpose | Location | Categories |
|---|---|---|---|
| Resend (optional) | Business outbound email | Provider regions | Recipient addresses and email content configured by the Business |
| Postmark (optional) | Business outbound email | Provider regions | Recipient addresses and email content configured by the Business |
| Custom SMTP (optional) | Business outbound email via customer-supplied SMTP | Customer-chosen host | Recipient addresses and email content configured by the Business |
Optional providers are not always enabled. They apply only when a Business configures them.
Change Notice
How we update this list
- We will update this page when we add or replace a material subprocessor.
- Where required by a signed DPA, we will provide additional notice to affected customers.
- Continued use of Application after the effective date of a posted change constitutes acknowledgment of the updated list, subject to any separate DPA rights.