Sub-processors
Who helps us run Cedric
A sub-processor is a third-party service we rely on to deliver Cedric. We use as few as possible, contract each one to protect your data and use it only to provide their service to us, and we never sell personal information.
Last updated: 7 June 2026
ProviderPurposeData processedLocation
Vercel
Purpose
Application hosting & edge delivery
Data processed
Requests, IP addresses, application logs
Location
United States / global edge
Prisma Postgres
Purpose
Primary application database
Data processed
All service data at rest (encrypted)
Location
United States
Prisma Data Platform (Accelerate)
Purpose
Database connection pooling & caching
Data processed
Queried service data in transit
Location
United States / global edge
Anthropic (Claude API)
Purpose
AI reply drafting & topic extraction
Data processed
Review text, reviewer display name, business & brand settings
Location
United States
Stripe
Purpose
Payments & billing
Data processed
Name, email, billing details, card tokens (no full card numbers)
Location
United States
Resend
Purpose
Transactional & review-request campaign email
Data processed
Recipient email & name, message content
Location
United States
Google (Business Profile API)
Purpose
Review sync & reply posting via OAuth
Data processed
Reviews, replies, OAuth tokens
Location
Your Google account / Google infra
Hosting regions may vary by deployment; email privacy@trycedric.com for current details. All data is encrypted in transit (TLS) and sensitive tokens are encrypted at rest (AES-256-GCM).
Changes to this list
When we add or replace a sub-processor that processes personal information, we update this page. To get advance notice of changes, for example under a Data Processing Addendum, email privacy@trycedric.com and we'll add you to the notification list.