Skip to main content

Legal

Sub-processors

Effective date:
May 1, 2026
Last updated:
April 20, 2026

fntune, Inc. engages the third-party vendors listed below to help operate the Subport platform. Each is bound by a data processing agreement that restricts their use of data to providing services to fntune. We require each sub-processor to maintain security and confidentiality standards at least as protective as our own.

This page supplements our Privacy Policy. When we add or replace a sub-processor in a way that materially changes how Customer data is processed, we update this page and, where applicable, notify Customers in advance as required by our data processing terms.

Infrastructure

Sub-processorPurposeData processedRegion
SupabaseManaged PostgreSQL database and authentication hostingAccount data, Customer Content, authentication recordsUnited States
VercelApplication hosting, CDN, file storage (Vercel Blob)Request metadata, uploaded attachments, application logsUnited States
UpstashRedis cache, background job queue (QStash), rate limitingSession cache, permission cache, queued workflow payloadsUnited States

AI / LLM inference

Sub-processorPurposeData processedRegion
AnthropicLLM inference for AI agent features (Claude)Prompts, Customer Content sent to agents, agent outputsUnited States
OpenAILLM inference for AI agent features (GPT)Prompts, Customer Content sent to agents, agent outputsUnited States
GoogleLLM inference for AI agent features (Gemini)Prompts, Customer Content sent to agents, agent outputsUnited States

Payments

Sub-processorPurposeData processedRegion
StripeSubscription billing and payment processingBilling name, address, email, payment method details (stored by Stripe; not by fntune)United States

Communications

Sub-processorPurposeData processedRegion
ResendTransactional email deliveryRecipient email address, email subject and body, delivery eventsUnited States

Observability

Sub-processorPurposeData processedRegion
SentryError monitoring and application performanceError payloads, stack traces, request metadata, user identifier (hashed)United States
PostHogProduct analytics and feature usage eventsProduct usage events, pseudonymous user identifier, device / browser metadataUnited States

International transfers

All sub-processors listed above are located in the United States. If you access Subport from the EEA, UK, or another region with data-protection laws governing international transfers, your personal data will be transferred to, stored, and processed in the United States. We rely on the European Commission’s Standard Contractual Clauses, together with any supplementary safeguards required under applicable law.

Changes to our sub-processors

We may add, remove, or replace sub-processors from time to time. The “Last updated” date at the top of this page reflects the most recent change. Customers with a signed DPA will be notified of material changes in accordance with that agreement. To receive proactive notification of changes, email privacy@subport.io.