Current sub-processors
| Provider | Purpose | Region | Safeguards |
|---|---|---|---|
| Supabase | Postgres database, authentication, edge functions, storage | United States | SCCs, SOC 2 Type II, ISO 27001 |
| Cloudflare | Edge worker, Pages Functions middleware, and CDN/DNS that route bot traffic | Global edge | SCCs, US Data Boundary, ISO 27001/27018, SOC 2 |
| Render.com | Hosts the headless Puppeteer renderer | United States | SCCs, SOC 2 |
| Vercel | Hosts the marketing site and dashboard frontend | United States / global edge | SCCs, SOC 2 Type II |
| Stripe | Payment processing, invoicing, subscription management | United States | SCCs, PCI DSS Level 1, US DPF |
| Resend | Transactional email delivery (from noreply@notify.renderbeam.com) | United States | SCCs, SOC 2 |
| OpenAI / Lovable AI Gateway | AI features used in optional tooling (e.g. llms.txt generator) | United States | SCCs, no training on customer data, US DPF |
| SnapSello Insights | Cookieless aggregate analytics for the marketing site | United States | No personal identifiers collected |
| Google (OAuth) | Optional sign-in with Google | Global | SCCs, US DPF |
Notification of changes
We notify customers at least 30 days before adding or replacing a sub-processor by updating this page and emailing the primary contact on the account. Customers may object on reasonable data-protection grounds — see the Data Processing Addendum.
Subscribe to changes
To be notified of changes, email privacy@renderbeam.com with the subject “Subscribe sub-processor updates”.
Explore RenderBeam
Learn what we do, how we price it, and how to get set up.