Sub-processors
Who helps us run Cedric
A sub-processor is a third-party service we rely on to deliver Cedric. We use as few as possible, contract each one to protect your data and use it only to provide their service to us, and we never sell personal information.
Last updated: 17 August 2026
ProviderPurposeData processedLocation
Vercel
Purpose
Application hosting, edge delivery, file storage & cookieless page-view analytics
Data processed
Requests, IP addresses, application logs, voice recordings, uploaded logos, aggregate page-view counts (no cookies, no cross-site identifier)
Location
United States / global edge
Prisma Postgres
Purpose
Primary application database
Data processed
All service data at rest (encrypted)
Location
United States
Prisma Data Platform (Accelerate)
Purpose
Database connection pooling & caching
Data processed
Queried service data in transit
Location
United States / global edge
Anthropic (Claude API)
Purpose
AI reply drafting, topic extraction & voice-review polishing
Data processed
Review text, reviewer display name, business & brand settings, voice transcripts
Location
United States
OpenAI (Whisper API)
Purpose
Transcription of voice reviews
Data processed
The customer's audio recording
Location
United States
Stripe
Purpose
Payments & billing
Data processed
Name, email, billing details, card tokens (no full card numbers)
Location
United States
Resend
Purpose
Transactional & review-request campaign email
Data processed
Recipient email & name, message content
Location
United States
Google (Business Profile API)
Purpose
Review sync & reply posting via OAuth
Data processed
Reviews, replies, OAuth tokens
Location
Your Google account / Google infra
Upstash
Purpose
Redis rate limiting, session revocation & job locks
Data processed
IP addresses, user & organisation identifiers
Location
United States
Firecrawl
Purpose
Retrieval of publicly available website content for competitor tracking
Data processed
Competitor & own-business website page content
Location
United States
Hosting regions may vary by deployment; email privacy@trycedric.com for current details. All data is encrypted in transit (TLS) and sensitive tokens are encrypted at rest (AES-256-GCM).
Changes to this list
When we add or replace a sub-processor that processes personal information, we update this page. To get advance notice of changes, for example under a Data Processing Addendum, email privacy@trycedric.com and we'll add you to the notification list.