Legal
Annex III: Subprocessors
The vendors that help us run Storm OS. Workspace admins get 30 days notice before we add one.
| Subprocessor | Legal entity and location | Processing activity | Personal Data processed | Location of processing |
|---|---|---|---|---|
| Netlify | Netlify, Inc., USA | Application hosting, serverless functions, CDN, blob storage for attachments and export bundles, error and performance monitoring | All Customer Personal Data in transit; attachments and files at rest; diagnostic data | USA |
| Neon | Neon, Inc., USA | Managed Postgres database | All Customer Personal Data at rest | United States and Germany |
| Resend | Resend, Inc., USA | Transactional email (verification, invitations, notifications) | Recipient name and email address, message content | USA |
| Google LLC | Google LLC, USA | Identity provider, where an Authorized User signs in with Google | Sign-in identity only | USA |
| Stripe | Stripe, Inc., USA | Subscription billing and payment processing | Billing contact name, email, address, tax ID | USA |
The current list is maintained at https://storm-os.app/subprocessors.
Questions about any of this go to legal@storm-os.com. Privacy requests go to privacy@storm-os.com, and anything security related to security@storm-os.com.