Sub-processors
Last updated: May 16, 2026
supapost engages the following third-party sub-processors to deliver the Service. Each is contractually bound to handle Personal Data in line with our Data Processing Addendum and the GDPR. We notify customers of any change to this list at least 14 days before a new sub-processor begins processing data.
| Name | Purpose | Region | Security |
|---|---|---|---|
| Supabase | Primary database (Postgres), authentication, and object storage for brand assets. | EU (configurable) | Link |
| Vercel | Application hosting, edge compute, and CDN delivery. | Global (multi-region) | Link |
| OpenAI | Generative AI for content, smart replies, and image generation (GPT-4o, DALL-E 3). Customer prompts are sent to OpenAI on each generation; content is not used to train OpenAI models per OpenAI's API data policy. | United States | Link |
| Stripe | Payment processing, subscription billing, and tax handling. | United States / Ireland | Link |
To request notification of sub-processor changes by email, write to privacy@supapost.ai.