Sub-processors

We keep this list short on purpose. Every vendor is another company with a copy of something, another security posture you are inheriting, and another privacy policy you did not read.

Note the unusual part: for an Owlsight customer, SEVERAL OF THESE ARE CONTRACTED BY YOU, IN YOUR OWN ACCOUNT, BILLED TO YOU. They are your sub-processors as much as ours. That is the flip side of owning your infrastructure.

Infrastructure

• Supabase — database, authentication and file storage. IN THE CUSTOMER'S OWN ACCOUNT.
• Sanity — website content management. IN THE CUSTOMER'S OWN ACCOUNT.
• Amazon Web Services / Vercel — application hosting.

Payments

• Stripe — payment processing. IN THE CUSTOMER'S OWN ACCOUNT. Card data goes to Stripe; we never see it.

Communications

• Resend — transactional email.
• Twilio — SMS delivery.

AI (only if you enable an AI module)

• Anthropic or OpenAI — whichever provider YOU configure, using YOUR API key. Your prompts go to them under their terms. If you configure no key, no AI feature calls anything.

Analytics

• Google Analytics 4 and PageSpeed Insights — website performance and traffic, where configured.

Changes

We will update this page when the list changes. If a new sub-processor would materially affect how customer data is handled, we will tell customers rather than leaving it to be discovered here.