Sub-processors
The third parties that can touch customer data, what each one is for, and where that data rests. Last updated 2026-07-29.
A sub-processor is a third-party service we use that can access customer data while doing its job for us — processing a payment, sending an email, verifying an identity, storing a document. This page lists all of them.
The list is generated from our internal vendor register, and a build check fails if the code gains an external endpoint that has no register entry. That is why this page stays current: it cannot fall behind the code without breaking the build.
Each row shows the status of that vendor's data processing agreement. We only write "signed" when an executed agreement is on file, so a status of "pending" means we have not verified one — it is a statement about our paperwork, not about the vendor.
Who we share data with
22 sub-processors that can touch customer data.
Anthropic
Hosted large-language-model inference for the sanctioned LLM layer.
- Data it can see
- Content you write
- Where data rests
- United States
- Agreement
- Pending
- Integration
- Built, switched off
AWS CloudFront + WAF
Content delivery, edge caching, and web-application firewalling.
- Data it can see
- Device and network
- Where data rests
- Multiple regions
- Agreement
- Pending
- Integration
- In use
AWS CloudWatch (logs, metrics, RUM)
Operational logs, metrics, alarms, and frontend real-user monitoring.
- Data it can see
- Device and network, Product usage, Error diagnostics
- Where data rests
- Canada
- Agreement
- Pending
- Integration
- In use
AWS Cognito
User authentication, sign-in, MFA (TOTP) and the account directory.
- Data it can see
- Identity documents, Contact details, Account details, Device and network
- Where data rests
- United States
- Agreement
- Pending
- Integration
- In use
AWS DynamoDB
Audit archive, price-history / trade-tape, and the optional notification store.
- Data it can see
- Account details, Balances and transactions, Error diagnostics
- Where data rests
- United States
- Agreement
- Pending
- Integration
- In use
AWS Kinesis / Glue / Athena
Analytics event streaming, cataloguing, and query over the data lake.
- Data it can see
- Account details, Product usage, Device and network
- Where data rests
- Canada
- Agreement
- Pending
- Integration
- In use
AWS S3
Object storage for KYC document images, audit anchors, and exported evidence.
- Data it can see
- Identity documents, Balances and transactions, Error diagnostics
- Where data rests
- United States
- Agreement
- Pending
- Integration
- In use
AWS SES / SMTP
Transactional email delivery (security alerts, receipts, verification codes).
- Data it can see
- Contact details, Account details, Balances and transactions
- Where data rests
- United States
- Agreement
- Pending
- Integration
- In use
Browser push services (VAPID)
Delivery of web-push notifications through the user's own browser vendor.
- Data it can see
- Device and network, Account details
- Where data rests
- Multiple regions
- Agreement
- Pending
- Integration
- Built, switched off
Cloudflare Turnstile / hCaptcha
Bot and automation defence on withdrawals and other sensitive actions.
- Data it can see
- Device and network
- Where data rests
- Multiple regions
- Agreement
- Pending
- Integration
- In use
GitHub (avatar CDN)
Serving profile pictures for accounts that signed in with GitHub.
- Data it can see
- Device and network, Account details
- Where data rests
- Multiple regions
- Agreement
- Pending
- Integration
- In use
Google (avatar CDN)
Serving profile pictures for accounts that signed in with Google.
- Data it can see
- Device and network, Account details
- Where data rests
- Multiple regions
- Agreement
- Pending
- Integration
- In use
Gravatar
Fallback profile pictures derived from the account email address.
- Data it can see
- Device and network, Contact details
- Where data rests
- Multiple regions
- Agreement
- Pending
- Integration
- In use
IPQualityScore
Geolocation, VPN/proxy detection, and fraud scoring on the jurisdiction gate.
- Data it can see
- Device and network
- Where data rests
- United States
- Agreement
- Pending
- Integration
- In use
Linear
Engineering issue tracking, including synced staging QA reports.
- Data it can see
- Content you write, Account details
- Where data rests
- United States
- Agreement
- Pending
- Integration
- In use
OpenSanctions
Sanctions and politically-exposed-person screening data.
- Data it can see
- Identity documents
- Where data rests
- Multiple regions
- Agreement
- Pending
- Integration
- Built, switched off
Persona
Identity verification (KYC document and selfie checks).
- Data it can see
- Identity documents, Contact details, Device and network
- Where data rests
- United States
- Agreement
- Pending
- Integration
- Built, switched off
PostHog
Product analytics, feature flags, and experiment assignment.
- Data it can see
- Account details, Product usage, Device and network
- Where data rests
- United States
- Agreement
- Pending
- Integration
- In use
Sentry
Application error tracking and performance diagnostics.
- Data it can see
- Account details, Device and network, Error diagnostics
- Where data rests
- United States
- Agreement
- Pending
- Integration
- In use
Stripe
Card payments, deposit processing, and enterprise subscription billing.
- Data it can see
- Identity documents, Contact details, Payment instrument, Balances and transactions, Device and network
- Where data rests
- Multiple regions
- Agreement
- Pending
- Integration
- In use
Unsplash
Stock imagery for category tiles and landing artwork.
- Data it can see
- Device and network
- Where data rests
- Multiple regions
- Agreement
- Pending
- Integration
- In use
Withdrawal payout provider
Automated payout rail for withdrawals.
- Data it can see
- Identity documents, Contact details, Payment instrument, Balances and transactions
- Where data rests
- Canada
- Agreement
- Pending
- Integration
- No vendor chosen
| Vendor | What it does for us | Data it can see | Where data rests | Agreement | Integration |
|---|---|---|---|---|---|
| Anthropic | Hosted large-language-model inference for the sanctioned LLM layer. | Content you write | United States | Pending | Built, switched off |
| AWS CloudFront + WAF | Content delivery, edge caching, and web-application firewalling. | Device and network | Multiple regions | Pending | In use |
| AWS CloudWatch (logs, metrics, RUM) | Operational logs, metrics, alarms, and frontend real-user monitoring. | Device and network, Product usage, Error diagnostics | Canada | Pending | In use |
| AWS Cognito | User authentication, sign-in, MFA (TOTP) and the account directory. | Identity documents, Contact details, Account details, Device and network | United States | Pending | In use |
| AWS DynamoDB | Audit archive, price-history / trade-tape, and the optional notification store. | Account details, Balances and transactions, Error diagnostics | United States | Pending | In use |
| AWS Kinesis / Glue / Athena | Analytics event streaming, cataloguing, and query over the data lake. | Account details, Product usage, Device and network | Canada | Pending | In use |
| AWS S3 | Object storage for KYC document images, audit anchors, and exported evidence. | Identity documents, Balances and transactions, Error diagnostics | United States | Pending | In use |
| AWS SES / SMTP | Transactional email delivery (security alerts, receipts, verification codes). | Contact details, Account details, Balances and transactions | United States | Pending | In use |
| Browser push services (VAPID) | Delivery of web-push notifications through the user's own browser vendor. | Device and network, Account details | Multiple regions | Pending | Built, switched off |
| Cloudflare Turnstile / hCaptcha | Bot and automation defence on withdrawals and other sensitive actions. | Device and network | Multiple regions | Pending | In use |
| GitHub (avatar CDN) | Serving profile pictures for accounts that signed in with GitHub. | Device and network, Account details | Multiple regions | Pending | In use |
| Google (avatar CDN) | Serving profile pictures for accounts that signed in with Google. | Device and network, Account details | Multiple regions | Pending | In use |
| Gravatar | Fallback profile pictures derived from the account email address. | Device and network, Contact details | Multiple regions | Pending | In use |
| IPQualityScore | Geolocation, VPN/proxy detection, and fraud scoring on the jurisdiction gate. | Device and network | United States | Pending | In use |
| Linear | Engineering issue tracking, including synced staging QA reports. | Content you write, Account details | United States | Pending | In use |
| OpenSanctions | Sanctions and politically-exposed-person screening data. | Identity documents | Multiple regions | Pending | Built, switched off |
| Persona | Identity verification (KYC document and selfie checks). | Identity documents, Contact details, Device and network | United States | Pending | Built, switched off |
| PostHog | Product analytics, feature flags, and experiment assignment. | Account details, Product usage, Device and network | United States | Pending | In use |
| Sentry | Application error tracking and performance diagnostics. | Account details, Device and network, Error diagnostics | United States | Pending | In use |
| Stripe | Card payments, deposit processing, and enterprise subscription billing. | Identity documents, Contact details, Payment instrument, Balances and transactions, Device and network | Multiple regions | Pending | In use |
| Unsplash | Stock imagery for category tiles and landing artwork. | Device and network | Multiple regions | Pending | In use |
| Withdrawal payout provider | Automated payout rail for withdrawals. | Identity documents, Contact details, Payment instrument, Balances and transactions | Canada | Pending | No vendor chosen |
What these labels mean
Agreement status
- Pending
- We have not verified an executed data processing agreement with this vendor. This is the honest default and the status most rows carry today.
- Signed
- An executed data processing agreement is on file. We do not use this label based on a vendor's published terms alone.
- Not applicable
- No personal data is disclosed to this party, so no data processing agreement is owed.
Integration status
- In use
- Wired up and reachable in at least one running environment.
- Built, switched off
- The integration is built but switched off everywhere, so no data flows to this vendor today.
- No vendor chosen
- The seam exists but no vendor has been chosen and nothing has ever been sent.
Where data rests
Our target is that all data rests in Canada, and that move is planned but not yet carried out — several stores are in the United States today. We list where data actually rests rather than where we intend it to rest.
Changes to this list
This page is regenerated whenever the vendor register changes. If you have a question about a specific sub-processor, write to privacy@drazill.com.