Subprocessors
Last updated: 16 June 2026. We will update this page before adding or replacing a subprocessor that processes user content or personal data. Material changes are announced in-app or by email.
| Provider | Purpose | Data | Location / Region | Transfer mechanism |
|---|---|---|---|---|
| Anthropic PBC | AI inference (Claude models) | Screenplay text and instructions in transit during AI operations | USA | Swiss–U.S. / EU–U.S. Data Privacy Framework or Standard Contractual Clauses |
| Supabase Inc. | Authentication, backend functions, encrypted storage | Account data; client-side-encrypted project blobs; usage counts | EU region (configured) | EU hosting; DPA |
| Netlify Inc. | Web hosting / CDN | Technical access data (IP, logs) | USA / global CDN | Data Privacy Framework or Standard Contractual Clauses |
| Stripe Managed Payments (Stripe, Inc.) | Merchant of record: payments, invoicing, taxes | Billing and payment data (independent controller) | USA / global | Own privacy terms as seller of record; DPF / SCCs |
| PostHog Inc. | Product analytics | Pseudonymous usage events (no content) | EU cloud (configured) | EU hosting; DPA |
| Plausible Insights OÜ | Web analytics | Aggregated, cookieless statistics | EU (Estonia) | EU hosting |
| Functional Software Inc. (Sentry) | Error monitoring | Crash/error data; request bodies scrubbed, no screenplay content | [USA / EU region — verify config] | Data Privacy Framework or Standard Contractual Clauses |
| Resend [legal entity — verify] | Transactional email (login/magic links, trial & account notices) | Recipient email address + message content | USA (EU region available) | DPF / SCCs — verify |
Not on this list by design: advertising networks, data brokers, AI training pipelines. User content is shared with exactly one external processor: Anthropic, to perform the AI operations you request.