Current subprocessors
| Subprocessor | Purpose | Primary data location | Privacy policy |
|---|---|---|---|
| Supabase | Postgres database, authentication, file storage | United States (AWS regions) | Policy ↗ |
| Vercel | Application hosting + serverless functions + CDN | United States + global edge | Policy ↗ |
| Stripe | Payment processing + subscription management | United States | Policy ↗ |
| Cloudflare | DNS + DDoS protection | United States + global edge | Policy ↗ |
| Resend | Transactional email (inquiry notifications) | United States | Policy ↗ |
| Upstash | Redis-based rate limiting | United States | Policy ↗ |
| Google (Analytics 4) | Marketing-site + dashboard product analytics (only with your consent) | United States | Policy ↗ |
Notifications of change
We will update this page when a subprocessor is added or removed. Business customers on a Data Processing Addendum may also request email notification of changes.
International transfers
Several subprocessors store data in the United States. Transfers rely on Standard Contractual Clauses or the subprocessor's equivalent transfer safeguards, plus an adequacy assessment under Malaysian PDPA section 129.