Subprocessors
Last updated: May 29, 2026
ChapterPulse uses the following third-party service providers (subprocessors) to deliver its services. Each subprocessor has been evaluated for its security practices and data handling policies.
| Provider | Purpose | Location | Certifications |
|---|---|---|---|
| Vercel Inc. | Application hosting, edge network, serverless functions | United States | SOC 2 Type II, ISO 27001 |
| Neon Inc. | PostgreSQL database hosting, authentication | United States | SOC 2 Type II |
| Cloudflare Inc. | Object storage (R2) for file uploads and banner images | United States | SOC 2 Type II, ISO 27001 |
| Resend Inc. | Transactional email delivery (invitations, reports, notifications) | United States | SOC 2 Type II |
| Inngest Inc. | Background job orchestration (scheduled reports, data sync) | United States | SOC 2 Type II |
| Stripe Inc. | Subscription billing and payment processing | United States | PCI DSS Level 1, SOC 2 Type II |
| Browserbase Inc. | Remote browser infrastructure for data collection from chapter management systems | United States | SOC 2 Type II |
| Anthropic PBC | AI model provider (Claude) for content drafting and data insights, routed via Vercel AI Gateway under zero data retention | United States | SOC 2 Type II |
| Google LLC | AI model provider (Gemini) for content drafting and data insights, routed via Vercel AI Gateway under zero data retention | United States | SOC 2 Type II, ISO 27001 |
| OpenAI, L.L.C. | AI model provider (GPT) for content drafting and data insights, routed via Vercel AI Gateway under zero data retention | United States | SOC 2 Type II |
| xAI Corp. | AI model provider (Grok) for content drafting and data insights, routed via Vercel AI Gateway under zero data retention | United States | SOC 2 Type II |
| Sentry (Functional Software Inc.) | Error monitoring and performance tracking | United States | SOC 2 Type II |
AI Providers: Zero Data Retention
ChapterPulse routes all AI-assisted features through the Vercel AI Gateway, which gives us a single policy surface in front of multiple large language model providers. The providers we currently use (Anthropic, Google, OpenAI, and xAI) operate under zero data retention agreements for API usage. Prompts and responses sent through ChapterPulse's AI features are not stored by these providers, are not logged for human review, and are not used to train or fine-tune AI models. This applies to all AI-assisted features including content drafting, compliance checking, and data insights.
Zero data retention is a hard requirement for any model we enable. Because every AI provider on this page operates under the same ZDR posture, we reserve the right to add, remove, or replace AI model providers at any time without advance notice, provided the replacement also operates under zero data retention. This list is the source of truth and is kept current.
Changes to Subprocessors
For all non-AI subprocessors, we will provide at least 30 days notice before adding or replacing a subprocessor. Customers with a Data Processing Agreement may object to a new subprocessor within 14 days of notification.
AI model providers are exempt from the 30-day notice window. Because every AI provider must operate under zero data retention as a hard requirement, swapping between ZDR-compliant providers does not change your data protection posture, only the underlying model we route through. The current list of AI providers is maintained in the subprocessors table above.
To receive notifications about subprocessor changes, contact us at privacy@chapterpulse.com.
Contact
For questions about our subprocessors, contact us at:
NekoTech Ventures Inc.
Email: privacy@chapterpulse.com
Alberta, Canada