Updated 2026-04-27
Sub-processors
The third-party services MatFlow uses to operate. Each handles specific data and operates under its own security and privacy commitments.
| Provider | Purpose | Data | Region |
|---|---|---|---|
| Vercel | Application hosting + serverless compute | Request metadata, server logs | USA / EU edge network |
| Neon | PostgreSQL database (managed) | All MatFlow data at rest | EU (eu-west-2) |
| Stripe | Payment processing (Stripe Connect, Stripe Billing, Stripe Tax) | Customer + subscription metadata. Card data never reaches MatFlow. | Global |
| Resend | Transactional email | Recipient email + template variables | USA |
| Vercel Blob | File storage (logos, attachments, imports) | Files uploaded by gym owners | Global edge |
| Anthropic (Claude) | AI causal-analysis monthly report (optional, gym opt-in) | Anonymised metric snapshot + Drive-indexed text excerpts | USA |
| Google Cloud (Drive API) | Drive folder indexing for AI report (optional, owner opt-in) | Read-only access to one designated folder | Global |
We notify customers of material changes (new sub-processors, replacement of an existing one) at least 30 days before they take effect.