Subprocessor List

Last updated: April 20, 2026

In accordance with GDPR Article 28, this page lists all subprocessors (third-party service providers) that process personal data on behalf of PM Smart.

What is a Subprocessor?

A subprocessor is a third-party data processor engaged by us (the data processor) to assist in fulfilling our obligations to you (the data controller).

Notification of Changes

We will notify customers at least 30 days in advance of adding or replacing any subprocessor. Notification will be sent via email to the primary account holder.

Current Subprocessors

Supabase

Database hosting, authentication, and storage

Visit Website →

Data Processed

User accounts, project data, files

Location

United States / EU (configurable)

Vercel

Application hosting and CDN

Visit Website →

Data Processed

Application code, analytics

Location

United States / Global CDN

OpenAI

AI-powered features (optional)

Visit Website →

Data Processed

Project descriptions, AI chat messages

Location

United States

Upstash

Redis caching and rate limiting

Visit Website →

Data Processed

Cached data, rate limit counters

Location

United States / EU (configurable)

Meilisearch

Search functionality (self-hosted)

Visit Website →

Data Processed

Project names, descriptions, search indexes

Location

Self-hosted on Railway.io (US/EU)

Stripe

Payment processing

Visit Website →

Data Processed

Payment information, billing details

Location

United States / Global

Data Protection Measures

All subprocessors listed above:

  • Have entered into Data Processing Agreements (DPAs) with us
  • Comply with GDPR requirements
  • Implement appropriate technical and organizational security measures
  • Process data only on our documented instructions
  • Maintain confidentiality of personal data

Questions?

If you have questions about our subprocessors, please contact us at: info@pm-smart.app