Sub-processors

The companies that process data on our behalf. Last updated 22 September 2026.

We tell you at least 30 days before adding one.

• [Supabase](https://supabase.com), database, authentication and file

storage. Holds everything below that is not listed against another name.

• [Vercel](https://vercel.com), hosting. Processes requests and logs.
• [Anthropic](https://anthropic.com), writing review drafts and reply

drafts from your approved facts.

• [Google](https://developers.google.com/my-business), your Business

Profile and public listing data, only where you have connected it.

• [Stripe](https://stripe.com), payments. We never see a card number.
• [Resend](https://resend.com), email. Your address and the message.
• [Twilio](https://twilio.com), phone verification during setup only.
• [Upstash](https://upstash.com), rate limiting. Holds a coarse address for

a short window.

• [Cloudflare](https://cloudflare.com), bot protection on public forms.
• [Sentry](https://sentry.io), error reporting, scrubbed of personal data.