Legal · last updated 2026-05-04
Subprocessors
Every vendor that processes data on behalf of RUQA. New entries are announced 30 days before they go live. Subscribe to changes via subprocessor-changes@ruqa.ai.
Current list
Active subprocessors.
| Vendor | Purpose | Region | DPA |
|---|---|---|---|
| Vercel, Inc. | Web hosting + edge compute | US · EU | Yes |
| Supabase, Inc. | Database + auth + storage | EU (default) · US opt-in | Yes |
| Anthropic PBC | Claude API (synthesis, sandbox) | US | Yes |
| OpenAI, L.L.C. | GPT API (sandbox) | US | Yes |
| Google LLC | Gemini API (sandbox) | US · EU | Yes |
| Replicate, Inc. | Open-weight model hosting (Llama) | US | Yes |
| Stripe, Inc. | Billing | US · EU · UK | Yes |
| Resend, Inc. | Transactional email | US | Yes |
| Cloudflare, Inc. | DNS + DDoS protection | Global | Yes |
| PagerDuty, Inc. | On-call incident routing | US | Yes |
Vendors marked DPA = Yes have a current Data Processing Agreement on file. RUQA does not ship customer data to vendors outside this list.