Sub-Processors
Last updated: August 2026
The following third-party service providers process personal data on behalf of Foundry01 LLC in connection with Trace. Each is engaged under a Data Processing Agreement governing processor obligations, confidentiality, security, sub-processing, deletion on termination, and, where applicable, international-transfer safeguards. We will update this page and provide 30 days’ advance notice before adding or replacing a material sub-processor.
| Provider | Purpose | Data processed |
|---|---|---|
| Supabase, Inc. | Database, authentication, file storage | Account data, screenshots, step text, narration audio and transcripts, embeddings |
| Vercel, Inc. | Website and API hosting | All data in transit |
| Stripe, Inc. | Payment processing and subscription management | Billing identifiers, subscription status (no card numbers) |
| OpenAI, L.L.C. | Voice transcription and step-description generation | Narration audio and transcript text. Retained transiently by OpenAI for abuse monitoring; not used to train OpenAI models. |
| Anthropic, PBC | Parsing documents you import as existing workflows | The text of an imported document (no screenshots, no audio). Retained transiently for abuse monitoring; not used to train Anthropic models. |
| Voyage AI (Voyage AI Innovations, Inc., a MongoDB company) | Text embeddings and search reranking for semantic step search | Step text, OCR text, and search query text (no screenshots, images, or audio). Not used to train models (paid tier + data opt-out). |
| Google LLC (Gemini API) | Optical character recognition and image analysis on workflow screenshots | Screenshot images, which may contain on-screen content. Paid tier — not used to train Google models. |
| Backblaze, Inc. (B2) | Encrypted backup of stored files and immutable audit-log archive | Backup copies of screenshots and avatars; pseudonymized audit records |
| Functional Software, Inc. (Sentry) | Error monitoring | Error metadata (personal data scrubbed before transmission) |
| PostHog, Inc. | Product analytics — feature adoption and activation funnels | Product event names and properties, application version, platform and architecture. Identity is the account’s opaque user identifier only; email addresses are never sent. No screenshots, narration, transcripts, or step content. |
| Plus Five Five, Inc. (Resend) | Transactional email delivery | Email addresses and email content (invitations, sign-in links, notifications) |
For questions about our sub-processors or to request our Data Processing Agreement, contact admin@foundry01.com.