Subprocessors
Last updated: March 3, 2026
We use the following subprocessors to operate the Service. Each is bound by contract to protect personal data. Where we or a subprocessor process data outside the EEA, we ensure appropriate safeguards (e.g. Standard Contractual Clauses). For more detail, see our Privacy Policy and Data Processing Agreement.
| Company | Purpose | Country | Safeguards |
|---|---|---|---|
| Stripe | Payment processing | USA / EU | SCCs, DPF where applicable |
| Prisma | Database and application data layer | EU / USA | SCCs if outside EEA |
| AWS SES | Transactional and notification emails | EU / USA | SCCs if outside EEA |
| Google Analytics | Website analytics (where consented) | USA / EU | SCCs, consent-based |
| PostHog | Product analytics (where consented) | EU | SCCs, consent-based |
| Axiom | Server logs | EU / USA | SCCs if outside EEA |
We will inform you of material changes to this list where required by our DPA. For questions, contact us via our contact page.