Subprocessors
These are the companies Concierge uses to process personal data. The ones marked “End user data: Yes” process data about the end users of your apps and are subprocessors under our Data processing agreement. Stripe only handles your own billing details, never your end users, and is listed for completeness.
Our application server, database and error tracking run on our own dedicated server at OVHcloud in Beauharnois, Quebec, Canada. GlitchTip, the error tracker, is software we host ourselves on that server, so it is not a subprocessor and error reports never leave our infrastructure.
OVHcloud
- Purpose
- Dedicated server that runs the Concierge API, worker, MCP server, the Postgres database and our self-hosted error tracking (GlitchTip).
- Data
- All service data: account data, conversations, end user profiles, device data, knowledge docs, logs.
- Location
- Beauharnois, Quebec, Canada
- End user data
- Yes
- Transfer safeguard
- EU adequacy decision for Canada (commercial organisations under PIPEDA); UK and Swiss equivalents.
Cloudflare
- Purpose
- DNS, TLS, CDN, firewall and the tunnel in front of our server; hosting for this website and the dashboard (Pages); R2 object storage for photo attachments and encrypted database backups.
- Data
- All traffic in transit (including IP addresses and request contents), attachments, encrypted backups.
- Location
- Global edge network; Cloudflare, Inc. is based in the United States. R2 buckets: Western North America (United States).
- End user data
- Yes
- Transfer safeguard
- EU-US Data Privacy Framework certification and Standard Contractual Clauses in the Cloudflare DPA.
Anthropic
- Purpose
- Claude models that write AI replies when the AI agent is on, and power the knowledge autopilot, spam filter, translation and review reply drafts.
- Data
- Conversation text and photos sent to the AI, the knowledge docs and app context needed for the reply.
- Location
- United States
- End user data
- Yes
- Transfer safeguard
- Standard Contractual Clauses in the Anthropic commercial terms and DPA. Under those terms Anthropic does not train models on API data.
Resend
- Purpose
- Sending transactional email: sign in codes and links, team invites, new message notifications and digests to your staff, and (only if you turn them on) renewal heads up emails to your end users.
- Data
- Recipient email address, name, email content, delivery metadata.
- Location
- United States
- End user data
- Yes
- Transfer safeguard
- Standard Contractual Clauses in the Resend DPA.
PostHog
- Purpose
- Product analytics for the Concierge dashboard: which features our customers use. Never used in the SDK or for your end users.
- Data
- Staff user id, pages and feature events in the dashboard, browser and device type. No email, no names, no message content.
- Location
- European Union (Frankfurt) or United States, depending on the project region
- End user data
- No
- Transfer safeguard
- Standard Contractual Clauses in the PostHog DPA.
Stripe
- Purpose
- Subscription billing, payment processing, invoices and tax for the Concierge subscription. Never sees your end users.
- Data
- Billing contact, company details, payment method (held by Stripe, we never see full card numbers), invoices.
- Location
- United States and Ireland (Stripe Payments Europe for EEA customers)
- End user data
- No
- Transfer safeguard
- EU-US Data Privacy Framework certification and Standard Contractual Clauses in the Stripe DPA.
Services you connect
Section titled “Services you connect”When you connect your own accounts, data flows between Concierge and those services on your instructions and under your agreement with them, so they are not our subprocessors: Apple (App Store Server API, App Attest, push through APNs), Google (Google Play Developer API, Play Integrity, push through Firebase Cloud Messaging, Google sign in), RevenueCat, Slack and other integrations you turn on.
How we tell you about changes
Section titled “How we tell you about changes”We give at least 30 days’ notice before a new subprocessor starts processing your end users’ data:
- Email to the owners of every organization.
- This page, with the change logged below.
- A feed at /legal/subprocessors.xml (RSS) you can follow in any feed reader, Slack or a monitoring tool.
You can object within the notice period by emailing [email protected], as described in section 5 of the DPA. To have extra people notified, ask us at the same address.
Change log
Section titled “Change log”- : First published list: OVHcloud, Cloudflare, Anthropic, Resend, PostHog and Stripe.