Subprocessors

Overview

This page lists categories of third-party providers that may process data when the corresponding feature is configured or used.

Provider Categories

| Category | Purpose | Examples | | --------------------- | --------------------------------------------------- | ----------------------------------------- | | Hosting and database | Application hosting, database, edge routing | Cloudflare, managed database providers | | Payments | Checkout, subscriptions, invoices, payment webhooks | Stripe, PayPal, Creem, Alipay, WeChat Pay | | Email | Transactional email and account notifications | Resend, Cloudflare Email | | Storage | File and payload object storage | S3-compatible storage, Cloudflare R2 | | AI providers | Optional AI analysis of redacted webhook payloads | OpenAI-compatible providers, DeepSeek | | Analytics and support | Product analytics and support widgets when enabled | Google Analytics, Plausible, Tawk |

Feature-Dependent Use

Provider credentials are configured in admin settings or production secrets. A provider is not used unless the relevant feature is enabled or configured.

Updates

This list may change as providers are added, removed, or replaced. Material changes should be reflected on this page before broad production rollout.