Subprocessors
The third-party services that may process customer data for Nuje.
Each vendor that can process customer data is covered by a Data Processing Agreement (DPA) or equivalent terms before launch.
| Vendor | Purpose | Data processed | DPA / status |
|---|---|---|---|
| Fly.io | Application compute and request routing | Application traffic and runtime secrets | DPA required before launch; vendor SOC 2 report on file |
| Neon | Managed Postgres database | Application database content and metadata | DPA required before launch; PITR restore drill required |
| Cloudflare R2 | Private object storage for media | Uploaded files and object metadata | DPA required before launch; private bucket only |
| WorkOS | Authentication and identity | User identifiers, emails, and session tokens | DPA required before launch; production AuthKit configured |
| Resend | Transactional invite email | Recipient email addresses and invite metadata | Required for invite email delivery |
| Sentry | Server error reporting | Error metadata after source redaction | DPA required before launch; PII scrubbing configured |
| Grafana Cloud | Traces and metrics | Operational telemetry after source redaction | DPA required before launch; logs are not ingested |
| Anthropic | Claude model calls via your own key (BYOK), optional fallback on paid plans, and managed agents | Prompts, tool context, and managed-agent session data when a workspace key or paid-plan platform key is configured | Available on paid plans; on Free, Claude requires a workspace key (BYOK) |
| Voyage AI | Semantic search embeddings | Text submitted for embeddings when configured | Available on paid plans; on Free, search uses keyword matching |
| OpenRouter | Free-tier model calls and workspace OpenRouter keys (BYOK) | Prompts, eligible image inputs, tool context, and usage metadata | Active subprocessor; account privacy / zero-data-retention (ZDR) and spend-alert evidence required |
Current controls
- Uploaded files are served only through authenticated app routes — never via public bucket URLs.
- Free-tier inference runs only on subsidized low-cost models; Claude and premium embeddings require a paid plan or your own key.
- Errors and operational telemetry are monitored through Sentry and Grafana Cloud.
See also our security posture.