Subprocessors
Third parties that may process customer data
We work with a small set of carefully reviewed subprocessors to deliver the CosmoQuick platform. Each is bound by data processing terms aligned with our customer commitments.
Current list
Active subprocessors
This list is reviewed periodically. Material changes are reflected here and communicated to customers in line with their agreements.
| Subprocessor | Purpose | Data | Location |
|---|---|---|---|
| Amazon Web Services | Cloud infrastructure and managed services | Account, application, and operational data | United States, European Union |
| Cloudflare | Edge network, DDoS protection, DNS, CDN | Network metadata, request data in transit | Global edge |
| Supabase | Managed Postgres database and authentication | Account, profile, and application data | United States, European Union |
| Stripe | Payment processing and billing | Billing contact and transaction metadata | United States, European Union |
| Resend | Transactional email delivery | Email address, message metadata | United States |
| PostHog | Product analytics and feature usage | Pseudonymous usage events | United States, European Union |
| OpenAI | AI model inference for product features | Prompts submitted by users for AI features | United States |
Notifications
Stay informed of changes
Customers under an active agreement can request advance notification of new subprocessors. Email trust@cosmoquick.com to be added to the notification list.