Trust
Subprocessors
The third parties that process customer data on our behalf, and what each one does.
Google Cloud Platform
PurposeInfrastructure
Data processedApplication data
Neon
PurposePostgreSQL database
Data processedApplication data
Cloudflare
PurposeEdge, WAF, object storage
Data processedDocuments and traffic
Clerk
PurposeAuthentication
Data processedUser identity
Vercel AI Gateway
PurposeLLM request routing
Data processedDocument text
Anthropic
PurposeLLM processing
Data processedDocument text
OpenAI
PurposeLLM processing
Data processedDocument text
Google Vertex AI
PurposeLLM processing and classification
Data processedDocument text
Infisical
PurposeSecrets management
Data processedNone
Sentry
PurposeError monitoring
Data processedApplication logs
Langfuse
PurposeLLM observability
Data processedPrompts (including document text) and outputs
Pipedream
PurposeWorkflow automation
Data processedGoogle Drive sync events
Resend
PurposeTransactional email
Data processedEmail addresses
Processing and storage take place in the United States. Region details for individual subprocessors are available in our security pack on request.
We update this page when a subprocessor is added or replaced. To receive advance notice of changes by email, write to security@goodstream.com.
Last reviewed: September 10, 2026