Trust
Sub-processors
Effective 2026-05-07.
These are the third-party providers we use to deliver Foundation Collab. Each touches only the data needed for its purpose, and each is bound by our Data Processing Addendum. We give 30 days' notice via in-portal banner before adding a new sub-processor.
Current list
| Provider | Purpose | Data touched | Region |
|---|---|---|---|
| Vercel ↗ | Web app hosting | Request metadata (IP, user-agent, signed-in user id), held briefly for log retention. | US (primary), global edge |
| Neon ↗ | Primary Postgres database | All structured tenant data: members, resources, events, messages, audit log, etc. | US East / EU West (per tenant.dataRegion) |
| Cloudflare ↗ | DNS, WAF, CDN, R2 object storage, custom-domain SSL | Network metadata + uploaded files (resource attachments, logos, recordings). | Global edge; storage primarily US/EU |
| Anthropic ↗ | Claude API (Collab Copilot + AI auto-summary) | Only the messages + tool inputs the model sees during a request; no training on customer data. | US |
| LiveKit Cloud ↗ | Native conference rooms + live streaming | Audio + video media during a session; recordings only when a host clicks Record. | US (primary) |
| Resend ↗ | Transactional email (sign-in magic links, notifications) | Email address + message contents. | US |
| Stripe ↗ | Billing (Parent Foundation subscription payments) | Billing contact + payment method (held by Stripe, not us). | US |
| Voyage AI ↗ | Resource Hub embeddings (hybrid search) | Resource title + summary text. | US |
Subscribe to changes
Email [email protected] and we'll notify you when this list changes.