Subprocessors
Last updated: September 9, 2026
This page lists providers that process data to supply Podclave, operated by Podclave LLC, and services you or a World Admin choose to connect. Infrastructure providers process service data for us. Connected services process data under the access you authorize and their own terms and settings.
We will update this page before adding a new infrastructure subprocessor. The change history of this page is preserved.
1. Infrastructure subprocessors
| Provider | Role | Data | Location |
|---|---|---|---|
| Fly.io, Inc. | Hosts the Podclave website and service. | Podclave service traffic and data transit its infrastructure. | United States. |
| Vercel Inc. | Hosts the compute for all World Workspaces and keeps saved Workspace state so work can return after compute parks or is replaced. | World repository and saved Workspace files, recovery snapshots, commands, agent session data, runtime traffic, and any connected-service content that a World member brings into an agent session. | United States. |
| Neon, Inc. | Managed database for Podclave service data. | Account, billing, membership, and configuration data, including credentials that Podclave encrypts before storage. | United States. |
| Resend, Inc. | Transactional email: sign-in codes, team invites. | Your email address and the contents of those emails. | United States. |
| Stripe, Inc. | Handles payments; merchant of record for standard Worlds plan sales. | Billing details and card data (provided by you directly to Stripe; card numbers never touch our servers), email, invoice history. | United States. |
| PostHog, Inc. (US Cloud) | Server-side product analytics. | Pseudonymous product-use events. Podclave excludes contact data, customer content, credentials, prompts, file and repository names, and network addresses. | United States. |
| Functional Software, Inc. d/b/a Sentry | Error and performance monitoring. | Diagnostic data about service failures and performance. Podclave excludes customer content, credentials, contact data, and network addresses. Request paths can contain pseudonymous record ids or organization slugs. | United States. |
| Cloudflare, Inc. | Bot protection (Turnstile) on the sign-in page; DNS and redirects; access checks and traffic for apps exposed at Public URLs; private R2 object storage for World Shared files and My files. | Browser signals from the sign-in page needed to distinguish humans from bots; DNS and request metadata, app traffic, and membership information needed for access checks; current World file content, file paths, and pseudonymous World and user identifiers when those features are used. | Global network for security, DNS, and app traffic; United States for the US-jurisdiction R2 bucket. |
| Google LLC (Google Cloud) | Creates and revokes the dedicated service accounts used for World Google Drive connections and supplies Model Armor screening for requested Google Doc and Slack message text. | Service-account information and requested Google Doc and Slack message text. Google Cloud does not retain a copy of text sent for screening. | United States for Model Armor; Google Cloud service locations for account information. |
| Eleven Labs Inc. | Optional speech-to-text for the mic in agent chats. It activates only after a user accepts the separate mic notice and taps the mic. It does not apply to users who do not use the mic. | The user’s mic audio, the transcript ElevenLabs creates, and normal connection data such as IP address. ElevenLabs uses default retention and can retain audio and transcripts. Podclave does not add account credentials to the request, but spoken content can contain sensitive data, so the consent notice tells users not to speak it. | Processing in the USA, Netherlands, and Singapore; storage in the United States. |
Existing-service hosting
Hetzner Online GmbH continues to host compute for existing customers who use that infrastructure. It processes their code, files, commands, session data, and runtime traffic in the United States. Worlds compute uses Vercel.
2. Connected services you authorize
These activate only if you connect them, and you can revoke each one — in Podclave and at the provider — at any time.
| Provider | Role | Data |
|---|---|---|
| Anthropic, PBC | Makes Claude available when you connect your account. | Sign-in and account information. Prompts, responses, and content supplied to Claude. Requests use your selected account access. |
| OpenAI OpCo, LLC | Makes Codex available when you connect your account or API key. | Sign-in and account information, or API requests under your key. Prompts, responses, and content supplied to Codex. Requests use your selected account access. |
| SpaceXAI LLC | Makes Grok available when you connect your account. | Sign-in and account information. Prompts, responses, and content supplied to Grok. Requests use your selected account access. |
| GitHub, Inc. | Supplies repository access through connected personal credentials or a World GitHub App installation. | Account and installation information, repository files, commits, and other GitHub operations you request. Access is limited by the authorization granted. |
| Google LLC (Google Drive and Google Workspace APIs) | A World Admin connects one Shared Drive by adding a dedicated Podclave-created service account with a chosen Google role. Podclave then offers fixed agent tools within that Drive. | Shared Drive and file ids, names, metadata, search terms, requested Google Doc text, and content supplied for creates or edits. Requested Doc text also goes to Google Cloud Model Armor before it reaches an agent. Google remains the source of truth. |
| Slack Technologies, LLC | Supplies public-channel discussion through the World’s connected app and bot, with posting if a World Admin enables it. | Connection and bot details, channel information, messages, threads, author references, source links, and content supplied for posts or replies. Requested message text also goes to Google Cloud Model Armor before it reaches an agent. Every World member can use the enabled access, including people without a personal Slack account. |
3. Client-side page resources
Podclave serves its own fonts, scripts, and styles from its own origin — these page assets do not send your IP address to a separate font or asset CDN. The sign-in page also loads Cloudflare Turnstile, covered as our bot-protection subprocessor in section 1 and in the Cookie Policy.
Optional voice dictation is not a page asset. After the user accepts the mic notice and taps the mic, the browser opens a direct connection to ElevenLabs for that dictation session. No ElevenLabs request is made only by loading a Podclave page.
Questions about any of these: hello@podclave.com.