Subprocessors
Effective August 6, 2026 · Last updated August 6, 2026
A subprocessor is a company we use to run part of the Service, and which therefore handles some of the data described in our Privacy Policy. This page lists every one of them, what it does for us, and what it receives. It is the single place this list is maintained — the Privacy Policy points here rather than repeating it, so the two cannot drift apart.
Each provider is bound by a data processing agreement that permits it to use the data only to provide its service to us. None of them are permitted to use it for their own purposes, and none of them are advertising or analytics companies.
1. Current subprocessors
| Provider | What it does | What it receives | Location |
|---|---|---|---|
| Vercel | Website and dashboard hosting, file storage for library uploads, and routing for AI features | Everything served through the website: requests, uploaded files, and infrastructure logs including IP addresses | United States |
| TODO_DATABASE_HOST | Managed PostgreSQL — the primary database | All stored application data described in the Privacy Policy | TODO_DATABASE_REGION |
| Upstash | Redis caching and QStash background job delivery | Cached session and configuration data, and the payloads of queued jobs such as notifications and audit writes | United States |
| Axiom | Structured application logging and error monitoring | Log events: timestamps, request paths, error traces, and the account or server an action related to | United States |
| Cloudflare | Turnstile bot detection on the verification pages | Request metadata including IP address and browser characteristics, used to decide whether a request is automated | Global edge network |
| DeepSeek, via Vercel AI Gateway | Generating short ticket titles, and answering questions on the documentation site | The first few messages of a ticket, or your documentation question. Not used to train models. | China, via global edge network |
| Railway | Hosting for the Discord bot process | Discord gateway events the bot handles, in memory, and process logs | United States |
2. Platforms you connect
These are not subprocessors — they are services you already have an account with, and which hold their own relationship with you. We exchange data with them at your direction.
| Platform | Relationship | Their policy |
|---|---|---|
| Discord | The platform Assistance runs on. Your account, servers, messages, and roles live with Discord; we hold copies of the parts described in our Privacy Policy. | Privacy policy |
| Roblox | Only if a server enables Roblox verification and you complete it. Roblox tells us the account identifier you verified with. | Privacy policy |
3. International transfers
Most of these providers store data in the United States. Where personal data of people in the EEA, the UK, or Switzerland is transferred to a country without an adequacy decision, the transfer relies on the European Commission's Standard Contractual Clauses, with the UK Addendum for UK transfers, incorporated into our agreement with each provider.
4. Changes to this list
We update this page before a new subprocessor begins processing personal data, not after. Server operators who want notice of changes can ask at TODO_EMAIL_PRIVACY and we will email them when this page changes.
If you object to a new subprocessor on reasonable data protection grounds, tell us within 30 days of the change. We will try to offer a workaround; if we cannot, you may stop using the affected feature.
5. Contact
Questions about this list go to TODO_EMAIL_PRIVACY. This page is published by TODO_LEGAL_NAME and referenced by our Privacy Policy and Terms of Service.