OperaticaOperatica
LoginJoin
Legal

Subprocessor list

Every company that can touch what you keep in Operatica, what it does, and what it can reach. Five of them, on purpose.

Last updated
August 16, 2026
Effective
At launch
On the register
5

Every subprocessor is contracted to process only for Operatica, on terms that exclude training on your content. No advertising or analytics vendor appears here, because there is not one.

Terms of servicePrivacy policySubprocessor list
On this page
01

What this register is

A subprocessor is a company that processes your content on our instructions so the product can work. Operatica keeps the list short and public, because a consultancy cannot pass its own client obligations through a vendor it is not allowed to see.

This register is part of the Privacy Policy and of the business terms in the Terms of service. Business customers can request a data processing addendum at legal@operatica.ai.

02

How a company gets on this list

  • It is necessary. If the product works without it, it does not get access.
  • It signs a processing agreement that binds it to our instructions, to confidentiality, and to no training or evaluation on your content.
  • It reaches the least it can. Access is scoped to the job in the row below, not to the workspace as a whole.
  • It processes in the United States, and it keeps a security contact we can reach inside a breach window.
03

The register

SubprocessorWhat it doesWhat it can reachLocation
SupabaseDatabase, authentication, and file storageAccount details and all workspace content at rest, encryptedUnited States
VercelApplication hosting and delivery of the product and this siteContent in transit through a request, plus operational logsUnited States
Vercel AI GatewayRoutes a request to the pinned model provider that computes the answerThe content sent for a given piece of work, in transit onlyUnited States
ResendSends account email: sign-in links, confirmations, and noticesYour name, email address, and the contents of that messageUnited States
StripeTakes payment and keeps the subscription recordBilling name, email, payment details, and invoices. No workspace contentUnited States

Nobody else reaches your content. There is no advertising vendor, no analytics vendor, and no data broker on this list, and there will not be one.

04

Model routing, named rather than implied

The gateway is a router, not a shield. Routing through it does not reduce what we owe you, so the providers actually reachable are named here and pinned in configuration. A gateway that could add a provider silently would be a defect, not a convenience.

Pinned model providers
When released, Operatica will clearly define implemented models here.

When a provider changes, this register changes on the same day.

05

Applications you authorize are not on this list

You can let an outside application reach your workspace. That application is not our subprocessor. It is a recipient you directed, so it is listed in your own settings rather than here, it reads only what you may read, and it is visible to your workspace owner.

Revoking a grant takes effect immediately, and removing a member ends theirs. Data that already left through a grant has left our control.

06

Changes to this register

We update this page when a subprocessor is added, removed, or changes what it does. The date at the top moves with it, and business customers can ask to be notified in advance of an addition.

To object to a new subprocessor, or to ask for the current processing agreements, write to legal@operatica.ai.