Legal
Sub-processors
Last updated November 4, 2026
InboxPilot uses the sub-processors below to run the service. Each one only receives the data it needs for the purpose listed, and each is bound by a written agreement with data protection obligations comparable to those in our Data Processing Addendum.
| Sub-processor | Purpose | Location |
|---|---|---|
| Supabase, Inc. (on Amazon Web Services) | Database | USA |
| Render Services, Inc. | Backend hosting | USA |
| Vercel Inc. | Web application hosting | USA |
| Anthropic, PBC | AI language model (drafting replies, answering questions) | USA |
| OpenAI, L.L.C. | AI language model and search indexing | USA |
| Google LLC | Gmail access for connected Google inboxes | USA |
| Microsoft Corporation | Outlook access for connected Microsoft inboxes | USA |
| Slack Technologies, LLC | Posting email to Slack for workspaces that connect Slack | USA |
| Stripe, Inc. | Payment processing | USA |
| Resend, Inc. | Sending system email (sign-in, notifications) | USA |
| PostHog, Inc. | Product analytics | USA |
| Functional Software, Inc. (Sentry) | Error monitoring | USA |
| Cloudflare, Inc. | DNS and network security | USA |
Changes to this list
We give at least ten days' notice before a new sub-processor starts processing customer data, by updating this page and emailing the address on your account, as set out in section 4 of the Data Processing Addendum. Questions or objections go to support@inboxpilot.co.