Sub-processors
Everyone who touches service data on our behalf, what they see, and where they run. Changes are announced to account owners 30 days ahead - see the DPA. Last updated 8 August 2026.
| Provider | Purpose | What they see | Region |
|---|---|---|---|
| Stripe | Subscription billing | Billing contact, plan, usage totals, payment details (which never touch our systems) | EU/US, SCCs |
| Resend | Transactional email | Recipient address and the content of account mails (verification, resets, invites, alerts) | EU/US, SCCs |
| Hosting (named here before launch) | Infrastructure for the control and data planes | Encrypted disks and network transit for everything the DPA describes | UK/EU |
No analytics, advertising or tracking providers - there are none to list.