Subprocessors and infrastructure
Understand which services help deliver DeepSearch and what role they play.
Updated
Principal providers
| Provider | Purpose | Information involved | Region and scope | Provider assurance |
|---|---|---|---|---|
| Vercel | Application hosting and delivery | Web requests and operational data | Global delivery; service dependent | SOC 2 and ISO 27001 resources in provider Trust Center |
| Supabase | Database, authentication, and storage | Account records and stored product data | Configured project region | SOC 2 Type 2; ISO 27001; HIPAA offering requires a BAA and approved scope |
| Cloudflare | Edge services and network infrastructure | Network requests and service data | Global network; service dependent | SOC 2 Type II; ISO 27001 provider resources |
| Stripe | Payments, subscriptions, and billing | Payment and transaction information | According to payment service terms | PCI Service Provider Level 1; provider SOC reports |
| PayPal | Supported payment transactions | Payment and transaction information | According to payment service terms | Provider privacy and payment security terms |
| PostHog | Product analytics and diagnostics | Product events and technical context | Configured analytics region | Provider SOC 2 and privacy documentation |
| OpenAI | AI processing for supported models | Relevant prompts, context, and attachments | According to model and service configuration | Provider enterprise privacy and security resources |
| Anthropic | AI processing for supported models | Relevant prompts, context, and attachments | According to model and service configuration | Provider assurance documentation in Trust Center |
How to read this directory
Feature specific processing
A request does not necessarily involve every provider listed here. Model gateways, public search, enrichment, communications, and removal providers can vary with the feature and configuration. Ask for the applicable provider scope for a specific workflow.
Different roles and regions
A global delivery network is not a data residency guarantee. Payment providers, app stores, and source publishers may act under their own terms. Our Privacy Policy explains disclosures and international processing.