Providers engaged to process customer Service data. The table below is the same list as the Data Processing Agreement; it excludes customer-directed integrations and vendors used for our own billing or website analytics.
| Sub-processor | Purpose | Processing location |
|---|---|---|
| Railway | Application and database hosting | EU / US |
| Cloudflare | Content delivery, object storage and custom domains | Global edge (EU / US) |
| Resend | Transactional email delivery | EU / US |
| OpenAI (OpenAI Ireland Ltd) | AI-generated answers and drafting (enabled features) | US, under the EU Standard Contractual Clauses |
| GlitchTip / Sentry-compatible monitoring | Error and performance monitoring where configured | EU / US |
Under the DPA, customers receive at least 30 days’ advance notice of intended additions or replacements and may object on reasonable data-protection grounds. This page supplements that notice and does not replace it. For entity, configured-region or transfer-safeguard details, contact [email protected]. EU/US entries do not promise EU-only residency. Transfers outside the EEA require the applicable Chapter V GDPR safeguards described in the DPA.
Data Processing Agreement · [email protected]
Changes
7 October 2026: created this public list from the existing DPA. No provider was added or replaced by this documentation change.