Sub-processors
Last updated: 2026-02-26
This page provides a transparency list of current sub-processors that may process data for UniDeck.ai.
1. Approach
- Sub-processors are used only to the extent necessary to provide the service.
- Where applicable, we apply DPA/SCC or equivalent contractual safeguards.
- Provider changes are reflected on this page first.
2. Sub-processor List
| Provider | Category | Purpose | Data Types | Transfer Region | DPA / Privacy |
|---|---|---|---|---|---|
| Vercel AI Gateway | AI model routing | Model call routing and orchestration | Prompts, model-call metadata | Global (provider dependent) | Privacy, DPA |
| OpenAI | LLM provider | Text/multimodal response generation | Prompts, output content, technical metadata | Global (provider dependent) | Privacy, DPA |
| Anthropic | LLM provider | Text response generation | Prompts, output content, technical metadata | Global (provider dependent) | Privacy, Trust |
| Google (Gemini/Google AI) | LLM provider | Text and file-based AI processing | Prompts, output content, technical metadata | Global (provider dependent) | Privacy, Cloud DPA |
| Cloudflare R2 | Cloud object storage | Storage for uploaded files | File content and file metadata | Global (account configuration dependent) | Privacy, DPA |
| Railway (managed PostgreSQL hosting) | Database infrastructure | Primary application data storage | Account, chat, transaction, and usage data | Provider dependent | Privacy, DPA |
| Google OAuth (via better-auth) | Authentication | Social sign-in workflow | Authentication profile data (name, email, etc.) | Global (provider dependent) | Privacy |
| Polar | Payment infrastructure | Subscription, billing, and payment event processing | Customer/subscription references, transaction data | Global (provider dependent) | Privacy |
| Resend | Transactional email | Verification, password reset, and notification emails | Email address, delivery metadata | Global (provider dependent) | Privacy, DPA |
| Meilisearch | Search engine | Chat/data search indexing | Indexed content and metadata | Provider dependent | Privacy |
| Vercel Analytics | Analytics | Product usage analytics | Usage and technical interaction data | Global (provider dependent) | Privacy, DPA |
| Google Analytics | Analytics | Traffic and interaction analytics | Cookie/device and usage metadata | Global (provider dependent) | Privacy, Data Terms |
3. Notes
- This is a living inventory and may be updated as infrastructure changes.
- This page should be read together with the Privacy Policy.