| Subprocessor | Entity / Address | Purpose | Data Categories | Location | Safeguard |
|---|---|---|---|---|---|
| Migadu | Migadu-Mail GmbH, Rohnen 587, CH-9414 Schachen, Switzerland | Support and administrative mailbox hosting | Correspondent names, email addresses, message contents and attachments | Switzerland (mail servers in France) | Data Processing Agreement |
| GitHub | GitHub, Inc., 88 Colin P. Kelly Jr. Street, San Francisco, CA 94107, USA | OAuth authentication | Email address, profile name, avatar and account identifiers | USA | SCCs (EU-US DPF) |
| Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA | Cloud infrastructure and social sign-in | OAuth profile, encryption key management data, generated artifacts and workflow metadata | USA (cloud data hosted in Germany, Belgium and Netherlands) | SCCs (EU-US DPF); OAuth n/a | |
| Hetzner | Hetzner Online GmbH, Industriestrasse 25, 91710 Gunzenhausen, Germany | Execution hosting | Customer flow payloads, integration credentials during execution and execution logs | Germany | n/a (EU) |
| Neon | Databricks Inc., 160 Spear Street, 15th Floor, San Francisco, CA 94105, USA | Managed Postgres database hosting | Account, organization, flow, credential, run and application records | USA (data hosted in Germany) | SCCs (EU-US DPF) |
| OpenAI | OpenAI OpCo, LLC, 1455 3rd Street, San Francisco, CA 94158, USA | AI model processing | Prompts, outputs and related account identifiers sent for AI features | USA | SCCs |
| Polar | Polar Software, Inc., 548 Market Street PMB 61301, San Francisco, CA 94104-5401, USA | Billing and merchant-of-record services | Billing identity, subscription, invoice and payment metadata | USA | SCCs |
| PostHog | PostHog, Inc., 2261 Market St., #4008, San Francisco, CA 94114, USA | Product analytics and exception capture | Product events, pseudonymous user identifiers, exception events and optional session data | USA | SCCs (EU-US DPF) |
| Resend | Plus Five Five, Inc., 2261 Market Street #5039, San Francisco, CA 94114, USA | Transactional email delivery | Recipient names, email addresses and transactional message content | USA (sending domain in Ireland) | SCCs (EU-US DPF) |
| Sentry | Functional Software, Inc. d/b/a Sentry, 45 Fremont Street, 8th Floor, San Francisco, CA 94105, USA | Error monitoring | Error events, stack traces, request URLs, user identifiers and incidental diagnostic data | USA | SCCs (EU-US DPF) |
| Vercel | Vercel Inc., 440 N Barranca Ave #4133, Covina, CA 91723, USA | Hosting and serverless compute | HTTP requests, session cookies, auth tokens, request logs and runtime configuration data | USA (functions in Germany) | SCCs (EU-US DPF) |
| Cloudflare | Cloudflare, Inc., 101 Townsend Street, San Francisco, CA 94107, USA | Network security and DNS/TLS | HTTP traffic in transit including session cookies, access logs | USA (global edge) | SCCs (EU-US DPF) |
Changelog
Changes to this list are published here in reverse-chronological order.
- 2026-09-29 - Added Migadu, which hosts the Supatable support and administrative mailbox.
- 2026-07-03 - Removed Anthropic (not in use by the service).
- 2026-07-03 - Added Cloudflare (network security, DNS/TLS) as a subprocessor.
- 2026-07-03 - Published entity details, data categories, locations and transfer safeguards for each subprocessor.
- 2026-06-29 - Added Sentry (error monitoring) as a subprocessor.
- 2026-04-16 - Initial publication of the subprocessors page.
Updates
Changes to this list will be published on this page.