Sub-processors
Last updated: May 16, 2026
supapost engages the following third-party sub-processors to deliver the Service. Each is contractually bound to handle Personal Data in line with our Data Processing Addendum and the GDPR. We notify customers of any change to this list at least 14 days before a new sub-processor begins processing data.
| Name | Purpose | Region | Security |
|---|---|---|---|
| Supabase | Primary database (Postgres), authentication, and object storage for brand assets. | EU (configurable) | Link |
| Vercel | Application hosting, edge compute, and CDN delivery. | Global (multi-region) | Link |
| xAI | Generative AI for content, smart replies, and image generation (Grok). Customer prompts are sent to xAI on each generation. | United States | Link |
| Dodo Payments | Merchant of record for all sales. Handles payment processing, subscription billing, invoicing, and global sales tax/VAT compliance. | United States | Link |
To request notification of sub-processor changes by email, write to privacy@supapost.ai.