About this list
This page lists the third-party service providers that may process personal data on our behalf as part of delivering our Service. We bind each Sub-processor by a written agreement with data protection obligations equivalent to ours.
We may add or replace Sub-processors. We notify customers at least 30 days in advance via email and update this list. If you have an active DPA with us, you may object to a new Sub-processor per the DPA terms.
Current Sub-processors
| Provider | Purpose | Country | DPA |
|---|---|---|---|
| Vercel Inc. | Hosting + Edge CDN | United States | DPA |
| Supabase Inc. | Database + Auth + Storage | United States | DPA |
| Cloudflare Inc. | DNS + CDN + Object Storage (R2) | United States | DPA |
| Stripe Inc. | Payment processing | United States | DPA |
| Resend Inc. | Transactional email | United States | DPA |
| Sentry (Functional Software Inc.) | Error tracking | United States | DPA |
| PostHog Inc. | Product analytics | United States | DPA |
| Clerk Inc. | Authentication (optional) | United States | DPA |
| Anthropic PBC | AI processing (when used) | United States | DPA |
| OpenAI L.L.C. | AI processing (when used) | United States | DPA |
| Meta Platforms Inc. | WhatsApp Business + Meta APIs (when used) | United States | DPA |
How we evaluate Sub-processors
- Security posture (SOC 2, ISO 27001 where applicable).
- Data protection commitments (DPA, SCCs for international transfers).
- Privacy by design and by default.
- Industry reputation, financial stability, support quality.
- Geographic location and applicable legal regime.
Customer-controlled processors
Customers may connect additional third-party services (e.g., their own Mailgun account, Twilio account, Meta Business Manager). Those are not our Sub-processors but processors of the Customer's choosing. The Customer is responsible for evaluating and engaging them.
Notifications
To receive notification of Sub-processor changes, ensure your Customer admin email is up to date in your account settings. You can also subscribe to updates by emailing privacy@shaartusa.com with subject “Subscribe: Sub-processor updates”.