Sub-processors
Last updated: 15 June 2026
To provide the Service, Hublytix uses a small number of third-party sub-processors. Each is bound by a data processing agreement and may process personal data only on our instructions. This page lists who they are, what they do, and where they operate.
| Sub-processor | Purpose | Data processed | Primary location |
|---|---|---|---|
| Supabase | Database and authentication | Account data, encrypted HubSpot tokens, audit findings | United States |
| Vercel | Application hosting | Request data, logs | United States / global edge |
| Cloudflare | DNS, CDN, and web application firewall | Network and request metadata | Global |
| Upstash | Background job queue (scheduled scans) | Job metadata | United States / global |
| Resend | Transactional email delivery | Email address, message content | United States |
| Stripe | Payment processing | Billing details (Stripe handles card data; we do not store card numbers) | United States / global |
| Sentry | Error monitoring and diagnostics | Error and diagnostic data, which may include IP address | United States |
Changes to this list
We may add or replace sub-processors as the Service evolves. When we make a material change, we will update this page and the “Last updated” date above. Customers with a Data Processing Agreement that requires advance notice of sub-processor changes will receive it as provided in that agreement.
Questions
For questions about our sub-processors or to request a Data Processing Agreement, contact privacy@hublytix.ai.