Subprocessors
Last updated: May 2, 2026
To deliver the Jettson service, we engage a small set of trusted third-party providers ("subprocessors") who process limited personal data on our behalf. This page lists every subprocessor currently in use, their purpose, and where they process data. Required disclosure under GDPR Article 28(2) and the Jettson Data Processing Agreement.
Each subprocessor is contractually bound to provide a level of data protection equivalent to ours. International transfers are covered by EU Standard Contractual Clauses (SCCs) or an adequacy decision where one applies.
We notify customers of new subprocessors at least 30 days before they go live by updating this page and announcing in the changelog. Customers on the Enterprise plan may receive email notifications by writing to privacy@jettson.ai.
Infrastructure & hosting
| Provider | Purpose | Data location | DPA |
|---|---|---|---|
| Vercel Inc. | Web app hosting, edge runtime, CDN, deployment platform | United States (global edge network) | View |
| Google Cloud (Firebase, Firestore, Cloud Storage, Cloud Functions) | Authentication, primary database, file storage, server-side functions | United States (us-central1 by default) | View |
| Cloudflare, Inc. | DDoS protection, WAF, Turnstile bot mitigation | Global edge network | View |
| Railway Corporation, Inc. | Gateway runtime hosting (when using remote-mode gateway) | United States | View |
AI / LLM providers
| Provider | Purpose | Data location | DPA |
|---|---|---|---|
| Anthropic, PBC | Claude LLM inference for chat, agent, and content generation | United States. Commercial API: data not used for training. | View |
| OpenAI, L.L.C. | GPT and embeddings inference for chat, agent, and content generation | United States. API data: opted out of training (default). | View |
| Google LLC (Gemini) | Gemini LLM inference (selected use cases) | United States. Paid API data: not used for training. | View |
Authentication
| Provider | Purpose | Data location | DPA |
|---|---|---|---|
| Apple Inc. | Sign in with Apple authentication | United States | View |
Payments
| Provider | Purpose | Data location | DPA |
|---|---|---|---|
| Stripe Payments Company | Subscription billing, customer portal, payment processing | United States. PCI-DSS Level 1. | View |
Communications
Data enrichment
| Provider | Purpose | Data location | DPA |
|---|---|---|---|
| Apollo Data, LLC (Apollo.io) | Lead and company enrichment for Studio CRM features | United States | View |
Analytics & monitoring
| Provider | Purpose | Data location | DPA |
|---|---|---|---|
| Sentry (Functional Software, Inc.) | Error tracking and performance monitoring | United States. Personally identifiable info scrubbed at SDK layer. | View |
Onward transfers
We do not sell or rent personal information to third parties. All data sharing with the providers above is strictly limited to delivering the service you signed up for.
Questions
For DPA requests, subprocessor change notifications, or vendor security questionnaires, contact privacy@jettson.ai. See also our Privacy Policy, Security, and Do Not Sell My Information page.