CRATARA legal
Subprocessors
These providers process limited data to deliver the current CRATARA service. Customer Content is not sold to them.
Effective August 26, 2026
Current providers
- Supabase: authentication, PostgreSQL database, file storage and related platform services. Data may include accounts, Customer Content, operational evidence and service logs.
- Vercel: web application hosting, delivery, runtime and deployment infrastructure. Data may include requests, IP and device information, and data processed transiently by application functions.
- Google: identity provider only for users who choose Google sign-in. Data may include Google account identity and authentication information.
Changes
Providers may change as CRATARA evolves. Material additions that process Customer Content will be reflected here before or when they are placed into production, subject to emergency security or availability needs. A customer with a signed agreement may have additional notice or objection rights in that agreement.
Excluded tools
Software or services that a customer independently connects, exports to or uses outside CRATARA are not CRATARA subprocessors and remain the customer's responsibility.