Sub-processors
IN FORCEWritten 2026-08-17
Every third party that can touch campaign material, and what for.
The complete list
This is the whole list. If it grows, it is announced in the changelog before the change, not after.
- Supabase
- Database, authentication, file storage, and the sender of every sign-in link. Frankfurt, EU.
- Vercel
- Hosting and edge delivery
- GitHub
- Nightly database backup, held as a private artefact for 30 days. It contains campaign material and member email addresses.
What is deliberately absent
No analytics provider. No advertising network. No session recording. No customer data platform. No model provider of any kind, because nothing in this product sends your campaign to one.