Subprocessors with review gates visible.
Current policy is visible here, while unfinished legal, security, vendor, and Enterprise review work stays out of public claims.
- Reviewed by
- GetFileURL technical team
- Updated
- Status
- Placeholder pending legal and vendor review
- Core vendors
- Cloudflare, Convex, Clerk
- Optional vendors
- PostHog, Sentry-style error reporting, scanner provider, Stripe later
What this page answers
No. It is a placeholder and must be approved before Enterprise commitments.
- Reviewed by
- GetFileURL technical team
- Last updated
Core product architecture depends on a small vendor set.
Cloudflare handles Workers, R2, CDN, Turnstile, Email Sending, and Web Analytics. Convex handles database, sync, functions, workflow state, and source-of-truth product records. Clerk handles authentication.
Cloudflare
Used for web runtime, upload API worker, delivery worker, storage, CDN, Turnstile, email, and public web analytics when configured.
Convex
Used for workspace data, realtime dashboard state, audit events, operational records, workflows, and control-plane functions.
Clerk
Used for user authentication and JWT identity delivered to Convex.
Optional vendors must pass review before claims depend on them.
PostHog, error reporting, scanner providers, Stripe, and Enterprise regional services need privacy, logging, retention, DPA, and regional review before public compliance claims rely on them.
Analytics
PostHog events are sanitized and disabled when no project token is configured.
Scanner
Scanner provider selection remains a validation item before scanner-safety claims.
Billing
Stripe is deliberately deferred and should be listed only when implemented.
Common questions
Is this the final subprocessor list?
No. It is a placeholder and must be approved before Enterprise commitments.
Is PostHog always enabled?
No. Product analytics is disabled unless a PostHog project token is configured.
Will Enterprise customers get vendor review?
Yes, Enterprise commitments require contract-specific vendor and regional review.