Subprocessor List

1. Overview

Pamphlet Inc. engages the following subprocessors to operate the Services. This list is updated when subprocessors change materially. Enterprise customers with notice requirements in an Order Form receive notice as specified in the Data Processing Addendum.

2. Infrastructure and platform

Vercel · Hosting and edge delivery · United States and global edge locations · Service data in transit and application logs

Supabase · PostgreSQL database, storage, and authentication backend · United States · Customer Content, account metadata, audit events, analytics events

Clerk · Authentication, organization management, and billing UI · United States · Account identity, session data, organization membership, billing metadata

3. Communications and payments

Resend · Transactional and product email delivery · United States · Email addresses, message metadata, and message content for mail sent through the platform

Stripe · Payment processing when billing is enabled · United States · Payment method metadata, transaction records, and customer billing identifiers

DataFast · Website analytics on public pages when consented · United States · Page views, referrer, device metadata, and conversion events without CRM content

4. AI model providers (conditional)

Anthropic · Large language model inference when platform-managed credentials are used or when Customer routes requests via BYOK · United States · Prompts and outputs submitted for AI features configured in the Pam Pod

OpenAI · Large language model inference when platform-managed credentials are used or when Customer routes requests via BYOK · United States · Prompts and outputs submitted for AI features configured in the Pam Pod

When Customers supply BYOK credentials, the Customer's direct agreement with the provider governs provider-side processing. Pamphlet remains a processor for data handled within Pamphlet systems.

5. Customer-configured connectors

Customers may connect third-party services using customer-owned credentials, including CRM, enrichment, and outbound tools such as HubSpot, Apollo.io, Instantly, Clay, and Salesforce where supported. These services are not Pamphlet subprocessors when the Customer contracts directly with the provider. Pamphlet processes data from these connectors only to perform Customer-directed integrations within Pam Pods.

6. Related infrastructure

Cloudflare may appear in Content-Security-Policy allowlists for bot protection and challenge flows associated with authentication providers. Svix verifies Clerk webhook signatures. These providers support infrastructure security and are not primary data stores for Customer Content.

7. Updates

Material subprocessor changes are reflected on this page with an updated effective date and at least thirty (30) days notice where practicable. Questions: cs@pamphlet.io

Related policies

• Data Processing Addendum
• Privacy Policy
• Cookie Policy