Subprocessors
Last updated: June 19, 2026
ChapterPulse uses the following third-party service providers (subprocessors) to deliver its services. Each subprocessor has been evaluated for its security practices and data handling policies.
| Provider | Purpose | Location | Certifications |
|---|---|---|---|
| Vercel Inc. | Application hosting, edge network, serverless functions, and AI Gateway (routes AI model requests under zero data retention) | United States | SOC 2 Type II, ISO 27001 |
| Neon Inc. | PostgreSQL database hosting, authentication | United States | SOC 2 Type II |
| Cloudflare Inc. | Object storage (R2) for file uploads and banner images | United States | SOC 2 Type II, ISO 27001 |
| Resend Inc. | Transactional email delivery (invitations, reports, notifications) | United States | SOC 2 Type II |
| Inngest Inc. | Background job orchestration (scheduled reports, data sync) | United States | SOC 2 Type II |
| Stripe Inc. | Subscription billing and payment processing | United States | PCI DSS Level 1, SOC 2 Type II |
| Browserbase Inc. | Remote browser infrastructure for data collection from chapter management systems | United States | SOC 2 Type II |
| Sentry (Functional Software Inc.) | Error monitoring and performance tracking | United States | SOC 2 Type II |
AI Processing: Zero Data Retention
ChapterPulse routes all AI-assisted features (content drafting, compliance checking, and data insights) through the Vercel AI Gateway. Vercel is our sole direct subprocessor for AI processing. The AI model providers and inference infrastructure used by Vercel AI Gateway are Vercel's subprocessors, not ours.
Vercel AI Gateway enforces zero data retention (ZDR) at the team level, meaning it only routes requests to providers with whom Vercel has negotiated ZDR agreements. Prompts and responses are not stored by any provider in the routing chain, are not logged for human review, and are not used to train or fine-tune AI models. For the current list of ZDR-compliant providers, see Vercel's ZDR documentation.
Because all AI traffic flows through Vercel under ZDR, individual AI model providers are not listed as ChapterPulse subprocessors. Adding, removing, or replacing AI models does not change your data protection posture, as any model routed through the Gateway must meet the same ZDR standard.
Changes to Subprocessors
We will provide at least 30 days notice before adding or replacing a subprocessor. Customers with a Data Processing Agreement may object to a new subprocessor within 14 days of notification.
To receive notifications about subprocessor changes, contact us at privacy@chapterpulse.com.
Contact
For questions about our subprocessors, contact us at:
NekoTech Ventures Inc.
Email: privacy@chapterpulse.com
Alberta, Canada