Subprocessors
Last updated
These are the third parties that process personal data on our behalf to run Adeli. This list is Annex III of our Data Processing Agreement.
How this list works
We review each subprocessor before we use it and bind it to written data protection terms. We share only the personal data each one needs for the purpose listed below.
Changes. We post any new or replacement subprocessor on this page at least 14 days before it starts processing personal data. To get those notices by email, write to hello@tryadeli.com with the subject "Subscribe to subprocessor updates". If you object to a change on reasonable data protection grounds, tell us within those 14 days and we'll work with you to resolve it.
Where data goes. King's Cross Labs is a US company, and Adeli runs in the United States. Personal data from the EU, UK and Switzerland reaches us under the Standard Contractual Clauses built into our DPA. Each subprocessor below is bound by a data processing agreement with us. The transfer column shows the safeguard for that vendor: DPF is the EU-US Data Privacy Framework, and SCCs are the European Commission's Standard Contractual Clauses.
Who is not on this list. The social platforms you connect (Instagram, Facebook, WhatsApp, TikTok, YouTube, X, Bluesky, LinkedIn, Reddit) receive data because you instruct us to publish to or read from them. They act as independent controllers under their own terms, so they are not our subprocessors. The same goes for any AI assistant or agent you connect to Adeli.
Infrastructure
| Subprocessor | Purpose | Data | Location | Transfer safeguard |
|---|---|---|---|---|
| Vercel Inc. | Application and website hosting, request processing, scheduled jobs | All service data in transit through the API, MCP server and dashboard | United States (us-east-1, Virginia) | DPF + SCCs, under the Vercel DPA |
| Databricks, Inc. (Neon) | Primary database (PostgreSQL) | Accounts, organizations, profiles, connected accounts and encrypted tokens, posts, comments, messages, analytics | United States (us-east-2, Ohio) | DPF + SCCs, under the Databricks DPA |
| Amazon Web Services, Inc. | Object storage and delivery (S3, CloudFront) for media uploaded for publication | Media files | United States (us-east-2, Ohio) | DPF + SCCs, under the AWS DPA |
Authentication
| Subprocessor | Purpose | Data | Location | Transfer safeguard |
|---|---|---|---|---|
| Better Auth, Inc. | Hosted sign-in infrastructure, security and admin dashboard | Dashboard users' names and emails, sign-in and session events, IP address, browser details and approximate location | United States | SCCs, under the Better Auth DPA |
Billing and email
| Subprocessor | Purpose | Data | Location | Transfer safeguard |
|---|---|---|---|---|
| Stripe, Inc. | Payment processing and subscription billing, including metered connected-account usage | Billing contact, payment method (held by Stripe, never by us), usage records | United States | DPF + SCCs, under the Stripe DPA |
| Plus Five Five, Inc. (Resend) | Transactional email | Recipient email addresses and notification content | United States | DPF + SCCs, under the Resend DPA |
Support, analytics and operations
| Subprocessor | Purpose | Data | Location | Transfer safeguard |
|---|---|---|---|---|
| Crisp IM SAS | Customer support chat on our website and dashboard | Signed-in users' names and emails, and anything you write in a support conversation | European Union (Netherlands, Germany) | EU company, bound by the GDPR directly; Crisp DPA |
| PostHog, Inc. | Product analytics, error monitoring, and data warehousing for operational reporting | Product events; approved account, profile, message, comment, billing and usage data | United States (US Cloud) | SCCs, under the PostHog DPA |
| Slack Technologies, LLC | Internal team alerts for new sign-ups and billing events | New sign-ups' name, email, company, role, and how they found us; billing event summaries | United States | DPF + SCCs, under the Slack DPA |
Questions about a subprocessor? Email hello@tryadeli.com.