Sub-processors
Last updated: June 13, 2026
This page lists the current service providers that may process customer personal data to operate BuildMyFunnel. Founder/counsel review was recorded on June 13, 2026; vendor records should be retained in the business/legal file and re-verified after material vendor or region changes.
1. Current list
| Sub-processor | Data | Purpose | Region | Transfer mechanism |
|---|---|---|---|---|
| Anthropic, PBC | Customer briefs and generated content sent to the Claude API. | AI content generation. | US | Commercial API terms/DPA and SCC transfer mechanism; re-verify current status at material changes. |
| Vercel Inc. | Application traffic, runtime logs, sandbox execution, environment configuration. | Hosting, serverless compute, sandboxed build execution. | US/global edge | EU-U.S. Data Privacy Framework and SCCs via Vercel DPA. |
| Supabase, Inc. | Accounts, briefs, build metadata, generated-content references, usage counters. | Database, auth, storage. | eu-central-1 for the current BMF project. | SCCs via Supabase DPA; EU region pinning preferred. |
| Stripe, Inc. | Billing identity, payment tokens, transaction history. | Payments and subscription billing. | US/global | EU-U.S. Data Privacy Framework and SCCs via Stripe DPA. |
| Resend, Inc. | Email addresses and withdrawal-request receipt/notification content when configured. | Narrow transactional email for withdrawal acknowledgments and operator notifications. | US/global | EU-U.S. Data Privacy Framework and SCCs via Resend DPA; scope must be re-reviewed before broader email use. |
2. Change notice
BuildMyFunnel gives 30 days' prior notice of intended additions or replacements where required by the DPA. Internal tools that do not touch customer personal data are not treated as sub-processors for DPA purposes.