Legal · effective January 1, 2026
Sub-processors
The third-party service providers Kabinet AI engages to deliver the Service. Each sub-processor is bound by data-protection terms equivalent to our DPA.
Current sub-processors
| Name | Purpose | Region | DPA |
|---|---|---|---|
| Vercel | Application hosting & edge network | US / Global | View → |
| Supabase | Primary database (Postgres) & file storage | EU (Frankfurt) | View → |
| Anthropic | AI inference (Claude models) | US | View → |
| Clerk | Authentication & user management | US | View → |
| Stripe | Payments & subscription billing | US / Global | View → |
| Resend | Transactional email delivery | US / EU | View → |
| Sentry | Error tracking & performance monitoring | US / EU | View → |
| Cloudflare | DNS, edge security, DDoS mitigation | Global | View → |
Notifications of changes
We notify customers at least 30 days before adding or replacing a sub-processor. Customers on annual plans may object on legitimate data-protection grounds; we will work with you to resolve the objection or, if it cannot be resolved, allow termination of the affected portion of the Service with a pro-rata refund.
Subscribing to updates
Email legal@kabinet-ai.com with subject "Subprocessor updates" to receive change notifications.