Subprocessors

1. Current subprocessors

Compify runs on a deliberately small vendor set. Each of the following processes personal data on our behalf under a written agreement containing data-protection obligations:

• Clerk, Inc. (United States) — authentication, sign-in, session management, and the user profile record (name, email address, profile image). Clerk is the system of record for your identity and your email address.
• Neon, Inc. (United States) — managed Postgres hosting. This is where account records, workspace and membership data, encrypted connector credentials, hashed agent session grants, usage metering, and visitor analytics records are stored.
• Vercel Inc. (United States) — application and API hosting, edge delivery, and platform logging for compify.dev, app.compify.dev, api.compify.dev, and mcp.compify.dev. Request and diagnostic logs pass through Vercel's platform.
• Vercel Blob, operated by Vercel Inc. (United States) — private object storage for files moved by a transfer tool, such as a mail attachment saved rather than read inline. Objects are private, scoped to a per-workspace key prefix, and deleted automatically 24 hours after they are written.
• Resend (Plus Five Five, Inc., United States) — delivery of transactional email such as workspace invitations and account and security notices. Resend receives the recipient address and the message we send.

2. Payments

Compify's own paid plans are not yet generally available and the product has no first-party payment integration today, so Compify uses no payment processor and none is listed above. When paid plans launch, Stripe, Inc. will process payments and will be added to the list with the date it took effect.

Stripe appears in Compify as a connector you can link to your own Stripe account. That is your relationship with Stripe under your own agreement with them, not a subprocessing arrangement between Compify and Stripe, and the same is true of every other third-party app in the catalog.

3. What is not a subprocessor

Two categories are frequently mistaken for subprocessors, and neither one is:

• The third-party apps you connect — Gmail, Slack, Notion, GitHub, Stripe, and the rest of the catalog. You hold those accounts, you grant the scopes, and your relationship with each is governed by that vendor's own terms. Compify calls them with your credential at your direction; it does not engage them on your behalf.
• Your AI assistant and its provider — Claude, ChatGPT, or any other MCP client you connect. Compify ships no AI of its own; the assistant is yours, you connect it, and what it does with a tool result after we return it is governed by your agreement with that provider. We never send your data to an AI provider that you did not connect.

This distinction is the point of the product: Compify is the connection layer, and the parties on either end of it are chosen by you.

4. Notice of changes

We will update this page before a new subprocessor begins processing personal data, and we will notify account holders through the Service or by email of material additions. If you have a signed data processing agreement with us that specifies an objection period, that agreement governs.

We give at least 30 days' notice before a new subprocessor begins processing personal data. If you object to an addition within that period, email chase@cobalttechsolutions.com; where we cannot offer a reasonable alternative you may terminate your account for the affected Service without penalty, and we will not charge you for a period you no longer use.

5. Contact

Questions about this list, or a request for our data processing terms: chase@cobalttechsolutions.com.