Sub-processors
Last updated: April 29, 2026
SocZap uses the third-party services listed below to operate the product. Each is contractually bound to handle customer data only as needed to provide their service to us. We notify customers at least 30 days before adding a new sub-processor — to subscribe to updates, email security@soczap.com.
| Sub-processor | Purpose | Region | Transfer mechanism |
|---|---|---|---|
| Supabase | Postgres database, authentication, file storage | United States | EU-US Data Privacy Framework |
| Vercel | Application hosting and edge network | United States | EU-US Data Privacy Framework |
| OpenAI | Large-language-model inference for question extraction and answer generation | United States | EU-US Data Privacy Framework |
| Stripe | Subscription billing and payment processing | United States / Ireland | EU-US Data Privacy Framework + SCCs |
| Resend | Transactional email delivery | United States | EU-US Data Privacy Framework |
| Upstash | Redis for rate limiting and caching | United States / European Union | EU-US Data Privacy Framework + SCCs |
| Sentry | Application error tracking | United States | EU-US Data Privacy Framework |
| PostHog | Product analytics (page views, feature usage) | United States | EU-US Data Privacy Framework |
Last reviewed: April 29, 2026. For a Data Processing Addendum that names these sub-processors, see /dpa.