Sub-processors
Last updated: 24 April 2026
This page lists the sub-processors CrowAgent currently uses to deliver the platform. The list is part of our Data Processing Agreement and is updated here at least 30 days before any change takes effect. Customers may subscribe to updates at hello@crowagent.ai.
Current sub-processors
| Sub-processor | Purpose | Data processed | Region | Since |
|---|---|---|---|---|
| Supabase (EU) GmbH | Hosted Postgres database, authentication, object storage | All application data (profiles, properties, contracts, reports) | AWS eu-west-1 (Ireland) | 2025-09 |
| Railway Corp | Backend API compute (FastAPI) | Request/response processing (no persistent storage) | europe-west4 (Amsterdam) | 2025-09 |
| Vercel Inc. | Frontend hosting and edge functions | Request routing, edge caching (no PII storage) | Global edge; compute lhr1 (London) | 2025-09 |
| Cloudflare, Inc. | DNS, DDoS protection, WAF | Edge request metadata only (IP, URL, headers) | Global edge; no persistent storage of PII | 2025-09 |
| Stripe Payments Europe, Ltd | Billing, payments, VAT handling, invoice delivery | Billing contact, VAT ID, payment method tokens, invoice history | EU (Dublin) with limited US fallback | 2025-09 |
| Resend (Resend Inc. via Amazon SES) | Transactional email delivery | Recipient email, email content, delivery events | eu-west-1 (Ireland) | 2025-09 |
| Sentry GmbH | Application error telemetry | Scrubbed stack traces, event metadata (no PII, no request bodies) | EU region | 2025-10 |
| PostHog Inc. | Product analytics (consented) | Page views, feature events, distinct user ID | eu.posthog.com (Frankfurt) | 2025-10 |
| Google Cloud EMEA Ltd (Vertex AI / Gemini) | Social Value narrative generation | Contract profile inputs; output narratives | europe-west4 (Amsterdam) | 2026-01 |
| Upstash, Inc. | Redis rate-limit counters | User ID or IP hash, counter values (no PII) | eu-west-1 (Ireland) | 2026-02 |
| Anthropic, PBC | Internal portal reasoning only - not used on the customer platform | Founders portal data only; no customer data sent | US with SCCs + UK IDTA | 2026-03 |
Change notification
We notify customers by in-app banner and email to the billing contact at least 30 days before adding a new sub-processor or moving an existing sub-processor to a new region. Customers may object on reasonable grounds; where an objection cannot be resolved, the Customer may terminate the affected services.
Removed sub-processors
No sub-processors have been removed since the platform launch. Future removals will be listed here with the date they stopped processing data.