Support · Security & data
Subprocessors and data locations
Four subprocessors touch your data, each with a narrow role. This page updates before any change takes effect.
The list
Supabase — Postgres database and authentication (finding records, audit entries, accounts). Upstash — Redis and QStash (distributed locks, rate limits, durable job delivery; transient processing state). Vercel — application hosting and edge delivery. Stripe API — outbound read calls against your account using your encrypted key.
What each one sees
Supabase stores findings and audit entries (no key material readable, per column revocations). Upstash handles transient processing state, never long-lived records. Vercel serves pages. Stripe sees only the read calls your scopes permit.
Change notification
Any subprocessor addition or replacement updates this page before taking effect — the commitment is contractual in Enterprise agreements and policy everywhere else.