Subprocessors
The third-party services that process your data to run Herald, what each does, and where.
Last updated: 26 October 2026
We use these providers to run Herald. Each is bound by a written contract to process data only to provide its service to us, with data-protection terms at least as protective as our Data Processing Addendum. None may use your Content to train machine-learning models.
We'll update this page at least 30 days before adding or replacing a provider, and email the owners of your organization. If you'd like those emails to go to a different address, tell us at support@getherald.ai.
Infrastructure
| Provider | What it does | What it sees | Location |
|---|---|---|---|
| Vercel, Inc. | Hosting | All data passing through the Service; server logs | United States |
| Supabase, Inc. | Database and file storage | All Content, account data, activity logs and backups | United States |
| WorkOS, Inc. | Authentication | Names, email addresses, organization membership, sign-in events | United States |
| Resend, Inc. | Transactional email | Recipient email addresses and the email's content | United States |
AI models
We use AI models to index, organise, describe, retrieve and check Content so the right parts reach the right agent. These providers receive only the Content and requests needed for the task, over API, under terms that prohibit training on it. Which provider handles which task changes as the product does; the list below is who may be involved.
| Provider | What it does | What it sees | Location |
|---|---|---|---|
| OpenAI, L.L.C. | AI models used to index and retrieve Content | Published Content and agents' requests, as the task needs | United States |
| Anthropic, PBC | AI models used to organise, describe, retrieve and check Content | Published Content and agents' requests, as the task needs | United States |
| TypeSafe AI, Inc. | AI models used to organise and retrieve Content | Published Content and agents' requests, as the task needs | United States |
Analytics
| Provider | What it does | What it sees | Location |
|---|---|---|---|
| PostHog, Inc. | Product analytics | Usage data as described in the Privacy Policy: ids, feature usage, counts, timings, device type. Never page titles, bodies, search text, file names or email addresses. | United States |
Changes
| Date | Change |
|---|---|
| 26 October 2026 | First published |