Skip to main content

Subprocessors

Last updated: 25 April 2026

Smoothly uses the third-party companies listed below (“Subprocessors”) to help deliver our service. Each Subprocessor is contractually bound to data protection obligations consistent with our Data Processing Agreement.

For details about how we secure customer data, see our Security page.

SubprocessorPurposeRegionPrivacy Policy
VercelApplication hosting and edge networkEU / GlobalView
SupabaseAuthentication and PostgreSQL databaseEUView
CloudflareCDN, DNS, and R2 object storageGlobal (R2: Western Europe)View
AnthropicAI code generation (Claude API)United StatesView
Google (Gemini)AI image generation (Gemini Flash Image)United StatesView
OpenAIOptional AI capabilities (text embeddings)United StatesView
StripePayment processing and subscription billingEU / GlobalView
SentryError monitoring and crash reportingEUView
PostHogProduct analytics and session replayEUView
ModalSandboxed code execution containersUnited StatesView
Customer.ioLifecycle and transactional emailUnited StatesView
UpstashRedis cache and rate limitingEUView
AxiomApplication logging and observabilityEUView
Temporal CloudWorkflow orchestrationEU (eu-central-1)View

International Transfers

Where a Subprocessor is located outside the European Economic Area, transfers are protected by the European Commission's Standard Contractual Clauses and supplementary measures where applicable. Personal data sent to AI providers (Anthropic, Google, OpenAI) is transmitted via API integrations under agreements that prohibit training on customer data.

Updates

We update this list whenever we add or remove a Subprocessor. Customers with an active Data Processing Agreement receive at least 30 days' advance notice of new Subprocessors via email to the technical contact on file. To subscribe to changes, email legal@smoothly.dev.

Questions

For questions about our Subprocessors or data processing arrangements, contact legal@smoothly.dev.