Legal
Subprocessors
The third parties Anilize engages to help deliver the platform. Each subprocessor is bound by data protection obligations no less protective than those in the Anilize Data Processing Addendum.
Aligned with DPA version 1.0.0 · Last updated 2026-04-30
For questions about Anilize subprocessors or to request notice of new subprocessors before they begin processing, email privacy@anilize.com. The companion Data Processing Addendum documents the contractual framework that governs every entry on this page.
Hosting & Infrastructure
| Vendor | Purpose | Data category | Region | Trust |
|---|---|---|---|---|
| Vercel, Inc. | Application hosting, Edge Functions, runtime logs, image optimization, blob storage, Vercel AI Gateway, Web Analytics | Application traffic, server logs, hosted content, AI Gateway request payloads, Web Vitals | United States (multi-region) | vercel.com/legal/privacy-policy |
| Cloudflare, Inc. | Cloudflare Workers AI for embeddings, classification, and rerank operations | RAG embedding inputs, classification text, reranking pairs | United States / European edge | cloudflare.com/trust-hub |
Database & Storage
| Vendor | Purpose | Data category | Region | Trust |
|---|---|---|---|---|
| Supabase, Inc. | Postgres database, authentication, object storage, Edge Functions, real-time, scheduled jobs | All persisted application data: borrower contacts, loan applications, agent runs, audit logs, encrypted credentials | United States (US-West) | supabase.com/security |
| Upstash, Inc. | Redis-compatible store for rate limiting and ephemeral cache | Request fingerprints, hashed identifiers, ephemeral cache values | United States / European Union | upstash.com/trust |
AI & ML inference
| Vendor | Purpose | Data category | Region | Trust |
|---|---|---|---|---|
| OpenAI, OpC | GPT-family chat models and embeddings via Vercel AI Gateway | Prompt content, completions | United States | openai.com/policies/api-data-usage-policies |
| Anthropic PBC | Claude-family chat models via Vercel AI Gateway | Prompt content, completions | United States | trust.anthropic.com |
| Google LLC | Gemini-family chat models via Vercel AI Gateway | Prompt content, completions | United States | cloud.google.com/security/compliance |
| xAI Corp | Grok-family chat models via Vercel AI Gateway | Prompt content, completions | United States | x.ai/legal/terms-and-conditions-of-service |
| Together AI | Hosted open-weights model inference, dedicated endpoints, fine-tuning | Prompt content, completions, fine-tuning datasets | United States | together.ai/legal |
Payments & Identity
| Vendor | Purpose | Data category | Region | Trust |
|---|---|---|---|---|
| Plaid Inc. | Borrower financial verification (Plaid Check, Plaid Income, Plaid Layer, Plaid Monitor) | Borrower bank account data, income, identity attributes, watchlist screening results | United States | plaid.com/legal |
| Stripe, Inc. | Subscription billing for Anilize tenants | Customer billing identity, payment-method tokens, invoice records | United States | stripe.com/privacy-center/legal |
Email & Notifications
| Vendor | Purpose | Data category | Region | Trust |
|---|---|---|---|---|
| Resend, Inc. | Transactional and broadcast email delivery and inbound parsing | Recipient email addresses, message content, inbound replies | United States | resend.com/legal/privacy-policy |
| Knock Labs, Inc. | Multi-channel notification orchestration | Recipient identifiers, channel preferences, notification payloads | United States | docs.knock.app/security |
Observability & Logging
| Vendor | Purpose | Data category | Region | Trust |
|---|---|---|---|---|
| Functional Software, Inc. (Sentry) | Error monitoring, performance tracing, release health | Error stack traces, request metadata, user identifiers (scrubbed) | United States | sentry.io/security |
| Logtail, Inc. (Better Stack) | Structured log aggregation | Application logs (scrubbed) | United States / European Union | betterstack.com/security |
Content management
| Vendor | Purpose | Data category | Region | Trust |
|---|---|---|---|---|
| BaseHub | Headless CMS for marketing site and tenant site content | Marketing copy, blog content, tenant-editable site copy | United States | basehub.com/security |
| Mintlify, Inc. | Documentation site builder for docs.anilize.com | Public documentation content | United States | mintlify.com/security |
Updates
This list is updated as the Anilize subprocessor footprint changes. Customers may subscribe to subprocessor updates by writing to privacy@anilize.com.