Subprocessor and Third-Party Provider List
This list is maintained as a web page at openserve.com/legal/subprocessors and may be updated from time to time. Enterprise customers may subscribe to change notices by emailing [email protected].
| Provider | Purpose | Data categories | Location | Status/terms |
|---|---|---|---|---|
| Vercel Inc. | Hosting, edge network, file storage (Blob), AI Gateway model routing | Customer Content, account data, prompts in transit to model providers | United States (primary: us-east-1) | Subprocessor |
| Neon Inc. | Primary database (Postgres) | Customer Content, account data | United States (us-east-1) | Subprocessor |
| Clerk Inc. | Authentication and identity | Name, email, authentication identifiers | United States | Subprocessor |
| Anthropic PBC | AI inference (Claude models) | Prompts, context, outputs | United States | Model provider; commercial API terms |
| OpenAI | AI inference (GPT models), input safety moderation, text embeddings | Prompts, context, outputs | United States | Model provider; commercial API terms |
| xAI Corp. | AI inference (Grok models; image/video generation) | Prompts, context, outputs | United States | Model provider (direct API); commercial API terms |
| Google LLC | AI inference (Gemini, Imagen, Veo) | Prompts, context, outputs | United States | Model provider; API terms |
| Additional model providers via Vercel AI Gateway (DeepSeek, Meta, Mistral, Alibaba, Z.ai, Sakana, MiniMax, Perplexity, Amazon, Cohere, Black Forest Labs, ByteDance, Recraft, Kling) | AI inference (text, image, video) | Prompts, context, outputs | Varies by provider | Model providers; current list in the Third-Party Models & AI Notice |
| Stripe, Inc. | Payments, subscriptions, invoicing | Billing contact and payment metadata | United States | Subprocessor / independent controller for payment processing |
| Resend | Transactional email (sign-in codes, notifications) | Email address, message content | United States | Subprocessor |
| Managed Redis (Redis Ltd.) | Caching, rate limiting, session and stream state | Identifiers, ephemeral counters | United States | Subprocessor |
| Nango | OAuth connection management for user-connected services | OAuth tokens, connection metadata | United States | Subprocessor |
| Composio | OAuth connection management for extended app integrations | OAuth tokens, tool-call data | United States | Subprocessor |
| Liveblocks | Real-time collaboration infrastructure | Live document collaboration content, presence | United States / EU | Subprocessor |
| PostHog, Inc. | Product analytics | Pseudonymous usage events, device data | United States (US cloud) | Subprocessor; consent-gated |
| Sentry (Functional Software, Inc.) | Error and crash monitoring | Error data (personal data scrubbed before sending) | United States | Subprocessor |
| Exa Labs | Web search retrieval for AI answers | Search query text | United States | Subprocessor |
| Google LLC (Places API) | Local business search | Location-related query text | United States | Service provider |
| Railway (Company-operated workers) | Document conversion, transcription, meeting-audio processing | Uploaded documents, audio | United States | Subprocessor |
| Apple (APNs), Google (FCM), browser push services | Push notification delivery | Device push tokens, notification content | United States | Service providers |
| Cloudflare, Inc. | Bot protection (Turnstile) | IP address, challenge telemetry | Global | Service provider |
Related
See the Data Processing Addendum and the Third-Party Models & AI Notice.