Sub-Processors
Third-party services that process personal data on behalf of Phirise
Last updated: May 29, 2026
In accordance with GDPR Article 28, we maintain this list of sub-processors — third-party service providers that process personal data on our behalf. Each sub-processor is required to process data only as instructed by Phirise and to maintain appropriate security measures. We review sub-processor posture, contract terms, data categories, and locations as part of vendor risk management and will update this page when material sub-processors are added or removed.
| Sub-Processor | Purpose | Data Types Processed | Location |
|---|---|---|---|
| Supabase, Inc. | Database hosting, authentication, and file storage | All user data (profile, content, auth tokens, files) | United States (AWS us-east-1) |
| Vercel, Inc. | Application hosting, serverless functions, edge network | Request metadata (IP, user agent), application logs | United States (Global Edge Network) |
| Stripe, Inc. | Payment processing and subscription management | Billing info, payment methods, subscription status | United States |
| xAI Corp. | Primary AI language model provider (Grok) | Chat messages, prompts, relevant business context, and AI outputs needed for requested features | United States |
| OpenAI, L.L.C. | AI language model provider (GPT), image generation (DALL-E) | Chat messages, prompts, relevant business context, generated images, and AI outputs needed for requested features | United States |
| Anthropic, PBC | AI language model provider (Claude) | Chat messages, prompts, relevant business context, and AI outputs needed for requested features | United States |
| Google LLC | AI language model provider (Gemini), OAuth authentication | Chat messages, prompts, relevant business context, AI outputs, and OAuth profile data where Google login is used | United States |
| Plaid, Inc. | Financial account connectivity and transaction sync | Bank account info, transaction history, account balances | United States |
| Deepgram, Inc. | Speech-to-text and text-to-speech processing | Audio recordings, transcriptions | United States |
| Functional Software, Inc. (Sentry) | Error monitoring and performance tracking | Error stack traces, request metadata (PII excluded via config) | United States |
| Upstash, Inc. | Rate limiting and caching (Redis) | User IDs (hashed), request counters | United States (AWS Global) |
| Resend, Inc. | Transactional email delivery | Email addresses, email content | United States |
Phirise evaluates each sub-processor for appropriate data protection and security measures before engagement and through periodic vendor review. If you have questions about a specific sub-processor or wish to object to a new material sub-processor, please contact us at support@phirise.com.
Questions about our sub-processors?
Contact our compliance team