Last reviewed: January 29, 2026
Subprocessors
SpeakerStacks engages the following third-party subprocessors to assist in providing our services. Each subprocessor is bound by data protection obligations no less protective than those in our Data Processing Addendum.
Summary
| Subprocessor | Purpose | Location |
|---|---|---|
| Supabase | Database & Authentication | US |
| Stripe | Payment Processing | US |
| Netlify | Hosting & Edge Functions | US |
| MailerSend | Transactional Email | EU |
| MailerLite | Email Marketing | EU (Lithuania) |
| PostHog | Product Analytics | US/EU |
| Sentry | Error Monitoring | US |
| OpenAI | AI Processing | US |
| Anthropic | AI Processing | US |
| Google (reCAPTCHA) | Bot Protection | US |
| Cloudflare (Turnstile) | Bot Protection | US |
| Conversion Tracking | US | |
| ipapi.co | Geolocation | US |
| RefGrow | Affiliate Tracking | US |
Detailed Information
SUPABASE, INC.
Database hosting, authentication, storage, and serverless functions
Data Processed
- -User account information (email, name, profile data)
- -Lead data (name, email, company, job title, phone, location)
- -Project and session data
- -Audio testimonial files
- -Engagement tracking data
- -Credit balances and transaction history
Location
United States (AWS infrastructure)
Legal Basis
Data Processing Addendum incorporated into Terms of Service
STRIPE, INC.
Payment processing, subscription management, and billing
Data Processed
- -Payment card information (processed, not stored by SpeakerStacks)
- -Email addresses
- -Billing addresses
- -Subscription and invoice details
- -Customer IDs
Location
United States (with EU entity: Stripe Payments Europe, Limited)
Legal Basis
Data Processing Agreement, EU-US Data Privacy Framework certified
NETLIFY, INC.
Web hosting, CDN, serverless functions, and edge computing
Data Processed
- -HTTP request logs
- -IP addresses
- -Browser/device information
- -Function execution logs
Location
United States (global CDN)
Legal Basis
Data Processing Agreement incorporated into Terms of Service
MAILERSEND (MAILERLITE GROUP)
Transactional email delivery
Data Processed
- -Recipient email addresses
- -Recipient names
- -Email content (dynamic templates)
- -Delivery and engagement metrics
Location
European Union
Legal Basis
Data Processing Addendum (integrated into Terms of Use)
MAILERLITE, UAB
Email marketing and subscriber list management
Data Processed
- -Subscriber email addresses
- -Subscription preferences
- -Email engagement data
Location
Lithuania (European Union)
Legal Basis
Data Processing Addendum (integrated into Terms of Use)
POSTHOG, INC.
Product analytics, feature flags, and error tracking
Data Processed
- -User events and interactions
- -Session data
- -Feature usage metrics
- -Error/exception data
Location
United States or European Union (customer choice)
Legal Basis
Data Processing Agreement (generated via self-service)
FUNCTIONAL SOFTWARE, INC. (SENTRY)
Application error monitoring and performance tracking
Data Processed
- -Error messages and stack traces
- -Browser and device information
- -User context (when errors occur)
Location
United States
Legal Basis
Data Processing Addendum (v5.1.0)
OPENAI, L.L.C.
AI-powered knowledge base embeddings and audio transcription
Data Processed
- -Knowledge base article content (title, summary, body)
- -Audio testimonial files (for transcription)
- -Generated embeddings and transcripts
Location
United States
Legal Basis
Data Processing Addendum (effective January 1, 2026)
Additional Information
Models Used: text-embedding-3-small, whisper-1
ANTHROPIC PBC
AI-powered knowledge base search and support assistance
Data Processed
- -Knowledge base articles
- -User search queries
- -Support ticket content
Location
United States
Legal Basis
Data Processing Addendum (incorporated into Commercial Terms)
Additional Information
Model Used: claude-3-haiku-20240307
GOOGLE LLC (RECAPTCHA)
Bot detection and fraud prevention on lead capture forms
Data Processed
- -reCAPTCHA tokens
- -IP addresses
- -Browser/device fingerprinting signals
- -User interaction patterns
Location
United States
Legal Basis
Google Cloud Terms of Service, EU-US Data Privacy Framework
CLOUDFLARE, INC. (TURNSTILE)
Bot detection on authentication pages (signup, signin, password reset)
Data Processed
- -Challenge tokens
- -Interaction signals
- -Browser/device information
Location
United States (global network)
Legal Basis
Cloudflare Customer DPA
LINKEDIN CORPORATION
Advertising conversion tracking and analytics
Data Processed
- -Page views and conversion events
- -Ad campaign attribution
- -Demographic data (for matched audiences)
Location
United States
Legal Basis
LinkedIn Data Processing Agreement
IPAPI (KLOUDEND, INC.)
IP-based geolocation services
Data Processed
- -IP addresses
- -Derived location data (country, city, coordinates)
Location
United States
Legal Basis
Terms of Service
REFGROW
Affiliate and referral tracking
Data Processed
- -Referral cookies (90-day retention)
- -Conversion attribution data
- -Affiliate IDs
Location
United States
Legal Basis
Terms of Service
Change Notification
We may update this subprocessor list from time to time. Material changes will be communicated via email to account holders at least 30 days before the change takes effect, unless a shorter notice period is required due to urgent security or legal requirements.
Questions?
If you have questions about our subprocessors or data processing practices, please contact us:
privacy@speakerstacks.com