Sub-processor Register

Vercel: application hosting, edge delivery, and serverless execution. Processing may occur in the United States and other provider regions needed to deliver the service.

Supabase: authentication, managed Postgres database, storage, and related infrastructure. Processing occurs in the configured Ancil project region and provider support locations.

Resend: transactional email delivery and delivery metadata.

Inngest: background-job orchestration, event processing, and execution metadata.

Slack: customer-authorised notifications and collaboration where a workspace enables the integration.

OpenAI: AI-assisted analysis, drafting, classification, and recommendation features when invoked.

Anthropic: AI-assisted analysis or drafting where the feature and configuration select Anthropic.

Ancil sends only the context needed for the requested feature. Customers should not submit sensitive data that is unnecessary for the task.

Stripe: subscription, invoice, payment, and billing-account processing. Ancil does not store full payment-card details.

Sentry: application error monitoring and diagnostic metadata where configured.

PostHog: server-side product event analytics and service-improvement measurement where configured.

HubSpot: the customer-selected CRM and connected platform. HubSpot processes data under the customer’s HubSpot agreement; Ancil accesses the portal only through customer-authorised scopes and instructions.

Where required for a restricted international transfer, INSIDEA uses adequacy decisions, the EU Standard Contractual Clauses, the UK Addendum, and supplementary measures. Provider-specific data-location details are available under confidentiality at privacy@insidea.com.

Workspace owners will receive at least 30 days’ notice before a new Sub-processor begins processing Customer Personal Data. Objections may be submitted to privacy@insidea.com on reasonable data-protection grounds during that period.