Subprocessors
Last updated
These are the companies that process personal data to help us run poun. Each one is bound by a contract that limits what it can do with the data, as our data processing agreement requires.
1. Used now
The website and the waitlist use only these:
| Company | What it does | Data | Where |
|---|---|---|---|
| Vercel Inc. | Hosts the website and the app, and serves public pages. | Everything shown on or sent to poun, request logs (IP address, browser, page) | United States, with a global edge network |
| Supabase Inc. | Database, team sign-in and file storage. | Waitlist emails; at launch, all account and workspace data | Region chosen at launch (listed here before use) |
2. Added when poun opens
These start processing data when the service opens, not before:
| Company | What it does | Data | Where |
|---|---|---|---|
| Stripe, Inc. | Takes subscription payments and handles invoices and tax. | Billing name, email, address, payment details (we never see full card numbers) | United States |
| Resend (Plus Five Five, Inc.) | Sends email: sign-in links, incident updates, receipts. | Recipient email addresses and email content | United States |
| Fly.io, Inc. | Runs background jobs: uptime checks and email sending. | Monitor results, queued emails | Region chosen at launch (listed here before use) |
| Cloudflare, Inc. | Bot protection on public forms and votes, and the backup copy of each status page. | IP address and browser signals (bot checks); published status page content | Global network |
| Functional Software, Inc. (Sentry) | Reports errors so we can fix them. | Error details, which can include an IP address and account ID | United States |
3. Changes to this list
We update this page at least 30 days before a new subprocessor starts processing customer personal data, and email workspace owners. To be told about changes before then, or to ask about any of these companies, write to [contact email].