# Subprocessors Providers Grey uses to deliver and secure the Service. Version 2026-09-10.1 Last updated: September 10, 2026 These providers may process Customer Personal Data to provide and secure Grey. The providers actually used depend on the Customer’s enabled features and use of the Service. ## Cloudflare, Inc. Purpose Content delivery, network security, edge services, consented web analytics and real-user performance measurement, and object storage Data categories Network request metadata; RUM page, referrer, navigation, and performance metrics; Customer files and exports; limited operational logs Processing location Global edge and service operations; EEA storage for configured object storage ## PlanetScale, Inc. Purpose Managed database hosting and backups Data categories Account, workspace, CRM, uploaded-file metadata, and service records Processing location EEA for configured database hosting; other locations for service operations under the applicable agreement and transfer safeguards ## API Hero Ltd (Trigger.dev) Purpose Durable background processing and task orchestration Data categories Task inputs, intermediate results, identifiers, and operational metadata Processing location EEA for configured task execution; United States and other locations for control-plane and service operations under the applicable agreement and transfer safeguards ## Vercel, Inc. Purpose Application hosting, server functions, and content delivery Data categories Web requests and responses, Customer data processed by the application, and deployment and operational logs Processing location EEA for configured server-function execution; global edge and service operations under the applicable agreement and transfer safeguards ## Plus Five Five, Inc. (Resend) Purpose Transactional, privacy, and permitted marketing email delivery Data categories Recipient names and email addresses, message content, delivery events, and preference metadata Processing location EEA for configured email delivery; United States and other locations for service operations under the applicable agreement and transfer safeguards ## Fireworks AI, Inc. Purpose Language-model inference Data categories AI prompts and inputs, model outputs, and inference metadata submitted by enabled features Processing location Shared Model API locations under the applicable agreement; no dedicated regional commitment ## Voyage AI Purpose Embedding and reranking model inference Data categories Text inputs, vector embeddings, reranking outputs, and API operational metadata Processing location United States and other locations under the applicable agreement and transfer safeguards ## Better Stack, Inc. Purpose Consented analytics, monitoring, logging, and error reporting Data categories Pseudonymous analytics identifiers and events; application logs, traces, browser errors, and related technical metadata Processing location EEA for configured telemetry storage; United States and other locations for service operations and subprocessors under the applicable agreement and transfer safeguards ## Google Ireland Limited (Google Analytics) Purpose Consented website analytics, acquisition and conversion measurement, and reporting alongside Google Search Console Data categories Pseudonymous analytics identifiers; page, referrer, interaction, device, approximate location, and campaign attribution data Processing location EEA and other locations for service operations under the applicable agreement and transfer safeguards ## DragonflyDB Ltd. (Dragonfly Cloud) Purpose Managed cache and transient application state Data categories Session, rate-limit, cache, and security metadata that may include user or workspace identifiers Processing location EEA for configured cache hosting; United States and other locations for service operations under the applicable agreement and transfer safeguards | Provider | Purpose | Data categories | Processing location | | --- | --- | --- | --- | | Cloudflare, Inc. | Content delivery, network security, edge services, consented web analytics and real-user performance measurement, and object storage | Network request metadata; RUM page, referrer, navigation, and performance metrics; Customer files and exports; limited operational logs | Global edge and service operations; EEA storage for configured object storage | | PlanetScale, Inc. | Managed database hosting and backups | Account, workspace, CRM, uploaded-file metadata, and service records | EEA for configured database hosting; other locations for service operations under the applicable agreement and transfer safeguards | | API Hero Ltd (Trigger.dev) | Durable background processing and task orchestration | Task inputs, intermediate results, identifiers, and operational metadata | EEA for configured task execution; United States and other locations for control-plane and service operations under the applicable agreement and transfer safeguards | | Vercel, Inc. | Application hosting, server functions, and content delivery | Web requests and responses, Customer data processed by the application, and deployment and operational logs | EEA for configured server-function execution; global edge and service operations under the applicable agreement and transfer safeguards | | Plus Five Five, Inc. (Resend) | Transactional, privacy, and permitted marketing email delivery | Recipient names and email addresses, message content, delivery events, and preference metadata | EEA for configured email delivery; United States and other locations for service operations under the applicable agreement and transfer safeguards | | Fireworks AI, Inc. | Language-model inference | AI prompts and inputs, model outputs, and inference metadata submitted by enabled features | Shared Model API locations under the applicable agreement; no dedicated regional commitment | | Voyage AI | Embedding and reranking model inference | Text inputs, vector embeddings, reranking outputs, and API operational metadata | United States and other locations under the applicable agreement and transfer safeguards | | Better Stack, Inc. | Consented analytics, monitoring, logging, and error reporting | Pseudonymous analytics identifiers and events; application logs, traces, browser errors, and related technical metadata | EEA for configured telemetry storage; United States and other locations for service operations and subprocessors under the applicable agreement and transfer safeguards | | Google Ireland Limited (Google Analytics) | Consented website analytics, acquisition and conversion measurement, and reporting alongside Google Search Console | Pseudonymous analytics identifiers; page, referrer, interaction, device, approximate location, and campaign attribution data | EEA and other locations for service operations under the applicable agreement and transfer safeguards | | DragonflyDB Ltd. (Dragonfly Cloud) | Managed cache and transient application state | Session, rate-limit, cache, and security metadata that may include user or workspace identifiers | EEA for configured cache hosting; United States and other locations for service operations under the applicable agreement and transfer safeguards | ## Changes Grey will notify affected Customers before adding or replacing a Subprocessor as described in the Data Processing Agreement.