Document · Subprocessor List

Subprocessor list.

Third parties engaged by Pondral to provide the Services. We notify customers 30 days in advance of any addition. Canonical list also published at /sub-processors.

Updated June 27, 2026Notice period 30 daysCanonical URL /sub-processors

Vendor	Service	Data	Region	Notes
Supabase	Database hosting and authentication	Account data, analysis results, usage records	United States (hosted on AWS us-east-1)	See privacy policy
Vercel	Application hosting and CDN	Server logs, IP addresses, request metadata	United States (global CDN)	See privacy policy
Stripe	Payment processing	Payment method details, billing address, transaction records	United States	See privacy policy
Resend	Transactional email delivery	Email addresses, email content, delivery metadata	United States	See privacy policy
PostHog	Product analytics	Usage events, page views, device metadata (no payment data)	United States	See privacy policy
Sentry	Error tracking and performance monitoring	Error logs, stack traces, browser metadata (no PII by default)	United States	See privacy policy
Anthropic, OpenAI, Google, Perplexity, xAI	AI visibility analysis engines	Brand names, website URLs, competitor names, industry context (no account PII sent to AI providers)	United States	See individual privacy policies

Customers can subscribe to subprocessor change notifications by emailing hello@pondral.com. For current BAA matrix on PHI vendors, see domain_canon.md or contact for assurance package.

Last updated June 2026Run a free audit →