Last updated: April 22, 2026
ShipPulse uses the following third-party service providers (“sub-processors”) to deliver its services. All sub-processors are bound by data processing agreements equivalent to our Data Processing Agreement.
| Sub-processor | Purpose | Country | Data processed |
|---|---|---|---|
| Supabase | Database, authentication, and file storage | United States | All user and project data, auth sessions, uploaded files |
| Contabo | Application server hosting (VPS / dedicated) | Germany | Application runtime, server logs, in-memory data |
| Resend | Transactional email delivery | United States | Recipient email addresses, email content, delivery logs |
| LemonSqueezy | Payment processing and subscription management (Merchant of Record) | United States | Billing information, payment data, customer records |
| xAI | AI features — testimonial sentiment analysis and content assistance (Starter+ plan) | United States | Testimonial text submitted for AI analysis (no training on customer data) |
| OpenAI | Video testimonial transcription via Whisper API (Pro+ plan) | United States | Audio/video files submitted for transcription (no training on customer data) |
| Axiom | Structured application logging and observability | United States | Server-side logs, error messages, performance metrics (no PII in logs) |
| Upstash | Rate limiting via Redis (sliding window) | United States | User ID or IP address for rate-limit counters (no content data) |
| DeepL | Testimonial translation into multiple languages (Pro+ plan) | Germany | Testimonial text submitted for translation (not stored by DeepL) |
International transfers: Sub-processors located outside the EU/EEA process data under EU Standard Contractual Clauses (SCCs) as described in our DPA.
Change notification: We will update this page at least 30 days before adding or replacing a sub-processor. Customers may object to changes by emailing [email protected].