> ## Documentation Index > Fetch the complete documentation index at: https://docs.brandatlas.pro/llms.txt > Use this file to discover all available pages before exploring further. # Subprocessors > Every outside company that handles personal data for Brand Atlas, what it does, and where. **Draft, not yet in force.** This document is being reviewed and will change before it applies to anyone. *Last updated: 4 October 2026.* These are the outside companies that handle personal data for us to run Brand Atlas. Each handles only what it needs for the job listed. | Provider | What it does for us | Data involved | Where | Transfer safeguard | | - | - | - | - | - | | **Supabase** | Our database, sign-in, and storage for logos, profile pictures and chat attachments | All account data and brand content | Frankfurt, Germany | Not needed (EU) | | **Cloudflare** | Stores and delivers your Brand Files and our backups; checks that sign-ups are people (Turnstile); runs our domain names | Your files; the IP address of people using our forms | Files and backups in the EU; delivery through Cloudflare's global network | \[TEAM TO CONFIRM] | | **Vercel** | Hosts the Brand Atlas app and runs its scheduled jobs and Oswald's jobs | Everything that passes through the app while it runs | United States \[TEAM TO CONFIRM: the region our app runs in] | \[TEAM TO CONFIRM] | | **Stripe** | Takes payments and runs subscriptions, invoices and the billing portal | Name, email, card details, billing history | United States and worldwide | \[TEAM TO CONFIRM] | | **Anthropic** | The AI behind Oswald and file descriptions | Brand content, files and chats sent to those features | United States | \[TEAM TO CONFIRM] | | **Resend** | Sends the app's emails: sign-in codes, invites, deletion notices, welcome emails | Name and email address, and the email's content | \[TEAM TO CONFIRM] | \[TEAM TO CONFIRM] | | **Google Workspace** | Sends account emails from our sign-in system, such as password resets | Email address, and the email's content | \[TEAM TO CONFIRM] | \[TEAM TO CONFIRM] | | **Sentry** | Records errors so we can fix them | Technical details of the error and the page it happened on. Not request contents, cookies or email addresses. | EU \[TEAM TO CONFIRM] | \[TEAM TO CONFIRM] | | **Discord** | Tells our team about new sign-ups, waitlist joins and feedback | Name, company and a few sign-up details. Never an email address or anything you wrote. | United States | \[TEAM TO CONFIRM] | | **GitHub** | Runs our nightly backup job | A backup that is encrypted before it leaves our database | United States | \[TEAM TO CONFIRM] | \[TEAM TO CONFIRM: whether Campaigner, our newsletter tool, belongs on this list once the newsletter list is connected to it.] ## Not on this list, and why * **Your own AI providers.** If you add your own OpenAI or Google Gemini key for Henry, or connect your own AI app through the Atlas MCP, that provider works for you, under your agreement with them. See the [AI terms](/legal/ai-terms). * **Google Fonts, while you preview.** When you preview a Google font in the font picker, your browser loads it from Google directly. Once you publish, we serve the font ourselves. * **Analytics.** We have no outside analytics tool. Usage is recorded in our own database, at Supabase. * **Uptime checks.** Two services check that Brand Atlas is up. They receive no personal data. ## How we choose them Before we use a provider, we check its security and its data protection terms, and we have a data processing agreement with each one. \[TEAM TO CONFIRM: that a data processing agreement is in place with every provider listed.] ## Hearing about changes We update this page before a new provider starts handling personal data, and tell account owners at least 30 days ahead by email. If you have a data protection reason to object to a new provider, write to \[TEAM TO CONFIRM: privacy contact email] within those 30 days. ## Changes * **4 October 2026:** first draft. This documentation is built and hosted on [Mintlify](https://mintlify.com), a developer documentation platform.