Subprocessors & DPAs

Last updated: May 19, 2026

Creator Outreach engages the following third-party services to operate the Service. Each is contractually bound to handle your data per our Privacy Policy and Data Processing Agreement. We share only the data required for each subprocessor to perform its function and we do not authorize them to use your data for their own purposes.

Looking for a signed DPA? We have counter-signed Data Processing Agreements on file for every subprocessor that touches personal data.

Jump to DPA library
SubprocessorPurposeData LocationDPA Signed
SupabaseDatabase, authentication, file storageUnited States (us-east)Yes — request via privacy@supabase.io
VercelApplication hosting + CDN, edge runtimeGlobal (primary US)Yes — auto-accepted on paid plan
AnthropicAI scoring, reply classification, email-draft assistanceUnited StatesYes — request via support
UnipileEmail + LinkedIn messaging API for outreach deliveryFrance (EU)Yes — request via support
StripePayment processing + subscription billingUnited States + EUYes — auto-accepted on activation
ResendTransactional email delivery (contact-form notifications, system mail)United StatesYes — available on request
Upstash (Redis + QStash)Background job queue + ephemeral cache layerUnited StatesYes — available on request

DPA library — signed Data Processing Agreements

Each subprocessor above that handles personal data has a counter-signed Data Processing Agreement on file. Download the current PDF below. Resend and Upstash DPAs are available on request — email dmeehanj@gmail.com.

Signed DPAs — 5 on file
VendorDocumentSignedDownload
UnipileData Processing Agreement2025-07-09PDF
AnthropicData Processing Addendum2026-04-28PDF
StripeData Processing Agreement2026-05-12PDF
VercelData Processing Addendum2026-05-12PDF
SupabaseData Processing Agreement2026-05-18PDF

Notifications about subprocessor changes

We notify customers at least 30 days before adding new subprocessors that handle personal data. You can subscribe to this page's RSS feed (coming soon) or check back periodically for changes. If you object to a new subprocessor for legitimate compliance reasons, you may terminate your subscription before the change takes effect and receive a pro-rated refund of any prepaid fees.

Questions

Email dmeehanj@gmail.com if you need a current DPA, a copy of a specific subprocessor's certifications, or have any other questions about how we share data with the services listed above.