Subprocessors
Last updated: October 2, 2026 · All located in the United States
HRAFN uses these third parties to process customer personal data, each only for the function listed and under a written contract with data protection obligations; HRAFN remains responsible for the processing it delegates. Before a new subprocessor processes customer personal data, we update this page and email our customers at least 15 days in advance.
| Subprocessor | Function |
|---|---|
| Vercel, Inc. | Cloud hosting, compute, and content delivery |
| Supabase, Inc. | Database and user authentication |
| OpenRouter, Inc. | Model gateway that routes AI requests to the model hosts below (configured for zero data retention) |
| Amazon Web Services, Inc. | Hosts Anthropic Claude models for AI inference (Amazon Bedrock), reached through OpenRouter with zero data retention |
| Google LLC | Hosts Anthropic Claude models for AI inference (Google Cloud Vertex AI), reached through OpenRouter with zero data retention |
| OpenAI, L.L.C. | Text embeddings for search and retrieval (API data not used for training) |
| Pinecone Systems, Inc. | Vector search and retrieval index |
| PostHog, Inc. | Product analytics and error monitoring |
| Stripe, Inc. | Payment processing and billing |
| Plus Five Five, Inc. (Resend) | Transactional email, such as user invitations |
| Brave Software, Inc. | Web search for the Hugh AI assistant's internet access (search queries only) |
Systems a customer connects to HRAFN, such as its dealer management system or its sign-in provider, are the customer's own vendors and are not HRAFN subprocessors.
Changes: October 2, 2026 · Added Brave Software, Inc. (web search).; September 25, 2026 · First publication of this list.
Questions: privacy@hrafn.ai