Version 2026-08-18.2
Last updated: August 18, 2026
These providers may process Customer Personal Data to provide and secure Grey. The providers actually used depend on the Customer’s enabled features and use of the Service.
Cloudflare, Inc.
- Purpose
- Content delivery, network security, edge services, and object storage
- Data categories
- Network request metadata; Customer files and exports; limited operational logs
- Processing location
- Global edge and service operations; EEA storage for configured object storage
PlanetScale, Inc.
- Purpose
- Managed database hosting and backups
- Data categories
- Account, workspace, CRM, uploaded-file metadata, and service records
- Processing location
- EEA for configured database hosting; other locations for service operations under the applicable agreement and transfer safeguards
API Hero Ltd (Trigger.dev)
- Purpose
- Durable background processing and task orchestration
- Data categories
- Task inputs, intermediate results, identifiers, and operational metadata
- Processing location
- EEA for configured task execution; United States and other locations for control-plane and service operations under the applicable agreement and transfer safeguards
Vercel, Inc.
- Purpose
- Application hosting, server functions, and content delivery
- Data categories
- Web requests and responses, Customer data processed by the application, and deployment and operational logs
- Processing location
- EEA for configured server-function execution; global edge and service operations under the applicable agreement and transfer safeguards
Plus Five Five, Inc. (Resend)
- Purpose
- Transactional, privacy, and permitted marketing email delivery
- Data categories
- Recipient names and email addresses, message content, delivery events, and preference metadata
- Processing location
- EEA for configured email delivery; United States and other locations for service operations under the applicable agreement and transfer safeguards
Baseten Labs, Inc.
- Purpose
- Language-model inference
- Data categories
- AI prompts and inputs, model outputs, and inference metadata submitted by enabled features
- Processing location
- Shared Model API locations under the applicable agreement; no dedicated regional commitment
Voyage AI
- Purpose
- Embedding and reranking model inference
- Data categories
- Text inputs, vector embeddings, reranking outputs, and API operational metadata
- Processing location
- United States and other locations under the applicable agreement and transfer safeguards
Better Stack, Inc.
- Purpose
- Consented analytics, monitoring, logging, and error reporting
- Data categories
- Pseudonymous analytics identifiers and events; application logs, traces, browser errors, and related technical metadata
- Processing location
- EEA for configured telemetry storage; United States and other locations for service operations and subprocessors under the applicable agreement and transfer safeguards
DragonflyDB Ltd. (Dragonfly Cloud)
- Purpose
- Managed cache and transient application state
- Data categories
- Session, rate-limit, cache, and security metadata that may include user or workspace identifiers
- Processing location
- EEA for configured cache hosting; United States and other locations for service operations under the applicable agreement and transfer safeguards
| Provider | Purpose | Data categories | Processing location |
|---|---|---|---|
| Cloudflare, Inc. | Content delivery, network security, edge services, and object storage | Network request metadata; Customer files and exports; limited operational logs | Global edge and service operations; EEA storage for configured object storage |
| PlanetScale, Inc. | Managed database hosting and backups | Account, workspace, CRM, uploaded-file metadata, and service records | EEA for configured database hosting; other locations for service operations under the applicable agreement and transfer safeguards |
| API Hero Ltd (Trigger.dev) | Durable background processing and task orchestration | Task inputs, intermediate results, identifiers, and operational metadata | EEA for configured task execution; United States and other locations for control-plane and service operations under the applicable agreement and transfer safeguards |
| Vercel, Inc. | Application hosting, server functions, and content delivery | Web requests and responses, Customer data processed by the application, and deployment and operational logs | EEA for configured server-function execution; global edge and service operations under the applicable agreement and transfer safeguards |
| Plus Five Five, Inc. (Resend) | Transactional, privacy, and permitted marketing email delivery | Recipient names and email addresses, message content, delivery events, and preference metadata | EEA for configured email delivery; United States and other locations for service operations under the applicable agreement and transfer safeguards |
| Baseten Labs, Inc. | Language-model inference | AI prompts and inputs, model outputs, and inference metadata submitted by enabled features | Shared Model API locations under the applicable agreement; no dedicated regional commitment |
| Voyage AI | Embedding and reranking model inference | Text inputs, vector embeddings, reranking outputs, and API operational metadata | United States and other locations under the applicable agreement and transfer safeguards |
| Better Stack, Inc. | Consented analytics, monitoring, logging, and error reporting | Pseudonymous analytics identifiers and events; application logs, traces, browser errors, and related technical metadata | EEA for configured telemetry storage; United States and other locations for service operations and subprocessors under the applicable agreement and transfer safeguards |
| DragonflyDB Ltd. (Dragonfly Cloud) | Managed cache and transient application state | Session, rate-limit, cache, and security metadata that may include user or workspace identifiers | EEA for configured cache hosting; United States and other locations for service operations under the applicable agreement and transfer safeguards |
Changes
Grey will notify affected Customers before adding or replacing a Subprocessor as described in the Data Processing Agreement.