Sub-processors
Last Updated: September 17, 2026 Thomas Abram, LLC | privacy@abram.network
Each sub-processor below offers data processing terms addressing GDPR Article 28, which are incorporated into its standard service agreement and apply to ABRAM's use of its service. Where a provider requires a separately executed Data Processing Agreement or Standard Contractual Clauses, we complete that step before the provider is used in production. Integrations marked only when connected receive no data until a customer explicitly enables them.
| Sub-processor | What it receives | Purpose | Region |
|---|---|---|---|
| Vercel Inc. | Application traffic | Hosting and content delivery | US |
| Supabase Inc. | All platform data, files | Database, storage, row-level security | US |
| WorkOS Inc. | User identity, organization data | Authentication, SSO, SCIM | US |
| Stripe Inc. | Payment and payout details, transaction data | Payment processing | US and EU |
| Anthropic, PBC | User inputs and context passed to AI features | AI inference | US |
| Functional Software, Inc. (Sentry) | Error logs, stack traces, device metadata, user ID | Error monitoring | US |
| Resend | Email address, email content | Transactional email | US |
| Mux Inc. | Playback and delivery data, including IP address and player metrics | Video hosting and streaming for demonstration videos | US |
| Adobe Inc. (Frame.io) | Project IDs, media file references | Video review, only when connected | US |
| Slack Technologies, LLC | Name, notification content | In-app notifications, only when connected | US |
| Google LLC / Microsoft Corp. | Calendar events, availability | Calendar sync, only when connected | US |
| Google LLC (Analytics) | Usage data, device metadata | Marketing site traffic measurement | US |
To request advance notice of changes to this list, contact privacy@abram.network.