Subprocessors
Last updated: October 18, 2026
Diocri uses the following third-party providers to run the Service. Each one is bound by data-protection terms. We email account admins at least 30 days before adding or replacing a subprocessor.
| Subprocessor | Purpose | Data involved | Location |
|---|---|---|---|
| Supabase, Inc. | Database, user authentication and file storage | All Customer Data and account data | United States (us-east-1) |
| Vercel, Inc. | Application and website hosting | Data passing through the app, request logs, IP addresses | United States |
| Stripe, Inc. | Payments, subscriptions and sales tax | Billing contact, payment details, plan | United States |
| Resend (Plus Five Five, Inc.) | Sending transactional email (sign-in, invitations, billing notices, support) | Name, email address, email content | United States |
| PostHog, Inc. | Product analytics (session recording off) | Usage events, user ID, browser and device data | United States |
| Functional Software, Inc. (Sentry) | Error monitoring | Error details, limited technical data | United States |
| Upstash, Inc. | Rate limiting | IP addresses, request counters (short-lived) | United States |
| Cloudflare, Inc. (Turnstile) | Bot protection on sign-up, sign-in, password reset and contact forms | IP address, browser signals | United States / global network |
| Google LLC (Google Workspace) | Support email inbox | Support messages and contact details | United States |
| Anthropic, PBC | AI assistance for customer support and internal operations | Support messages, contact details and limited account information | United States |