SUBPROCESSOR LIST

Effective Date: August 1, 2026
GDPR Article 28 – Subprocessor List

CLOUD INFRASTRUCTURE

• Vercel – Application hosting, CDN – US & EU – SOC 2 Type II
• Supabase – Database, authentication – Tokyo (ap-northeast-1) – SOC 2 Type II
• Cloudflare – DDoS protection, DNS – Global

AI & MODEL PROVIDERS

• Anthropic – Claude AI inference – US – GDPR compliant
• OpenRouter – Model routing, image generation – US

PAYMENT & BILLING

• AllScale – USDC payment processing – US & Polygon – PCI-DSS
• Resend – Transactional email – US

For complete list with change notifications, see our Data Processing Agreement