TRUST & COMPLIANCE
Subprocessors
To support delivery of our services, Costframe engages third-party infrastructure subprocessors. Below is the transparent list of authorized providers.
Scope Notice:We list only services actually active in our production flows. An AI provider row is only appended if an AI runtime is running in active production. Customers’ own Azure, AWS, and GCP cloud environments are client-owned and are not subprocessors.
| Subprocessor | Purpose | Data Category | Region | Status |
|---|---|---|---|---|
| Supabase | Database & storage | Encrypted credentials, cost snapshots, metadata | US | Active |
| Clerk | Authentication & identity | User profiles, emails, sessions | US | Active |
| Stripe | Billing & subscriptions | Company/billing details, card tokens | US | Active |
| Resend | Transactional email | Notification & report delivery | US | Active |
| PostHog | Product analytics | Usage events (no credentials) | US | Active |