Subprocessors
Last updated: October 25, 2026
This page lists providers that process data to supply Podclave, operated by Podclave LLC, and services you or a World Admin choose to connect. Infrastructure providers process service data for us. Connected services process data under the access you authorize and their own terms and settings.
We will update this page before adding a new infrastructure subprocessor. Prior versions are available on request.
1. Infrastructure subprocessors
| Provider | Role | Data | Location |
|---|---|---|---|
| Fly.io, Inc. | Hosts the Podclave website and service. | Podclave service traffic and data transit its infrastructure. | United States. |
| Vercel Inc. | Hosts World Workspaces and keeps saved Workspace state; routes selected Lab-funded AI requests through AI Gateway. | World repository and saved Workspace files, recovery snapshots, commands, agent session data, runtime traffic, and connected-service content brought into an agent session; prompts, responses, and supplied content in Lab-funded AI requests. | United States for Workspace hosting; AI processing depends on the provider used to serve the selected model. |
| Neon, Inc. | Managed database for Podclave service data. | Account, billing, membership, and configuration data, including credentials that Podclave encrypts before storage; encrypted copies of saved World conversations; pseudonymous product-use and Session timing events. | United States. |
| Resend, Inc. | Transactional email: sign-in codes, invitations, welcome messages, and billing and service notices. | Your email address and the contents of those emails. | United States. |
| Stripe, Inc. | Handles payments; merchant of record for Worlds plans and AI funds bought in Podclave. | Billing details and card data (provided by you directly to Stripe; card numbers never touch our servers), email, invoice and purchase history. | United States. |
| Functional Software, Inc. d/b/a Sentry | Error and performance monitoring. | Diagnostic data about service failures and performance. Podclave removes request parameters, headers, cookies, user details, and IP addresses before sending. Error messages and request paths can contain record ids, Lab or World identifiers, or other details of the failed operation. | United States. |
| Cloudflare, Inc. | Bot protection (Turnstile) on the sign-in page; DNS and redirects; access checks and traffic for apps exposed at Public URLs; private R2 object storage for World Shared files, My files, retained conversation attachments, and temporary conversation downloads. | Browser signals from the sign-in page needed to distinguish humans from bots; DNS and request metadata, app traffic, and membership information needed for access checks; current World file content, file paths, file details such as size and time, pseudonymous World and user identifiers, retained conversation attachments, and temporary conversation downloads when those features are used. | Global network for security, DNS, and app traffic; United States for the US-jurisdiction R2 bucket. |
| Google LLC (Google Cloud) | Creates and revokes the dedicated service accounts used for World Google Drive connections and supplies Model Armor screening for requested Google Doc text and Slack message text, file details, and available previews or transcripts. | Service-account information; requested Google Doc text; and requested Slack message text with author references, timestamps, and links, file details, and available previews or transcripts. Podclave sends only the content to be screened, not Podclave account details. | United States for Model Armor; Google Cloud service locations for account information. |
| Eleven Labs Inc. | Optional speech-to-text for the mic in agent chats. It activates only after a user accepts the separate mic notice and taps the mic. It does not apply to users who do not use the mic. | The user’s mic audio, the transcript ElevenLabs creates, and normal connection data such as IP address. ElevenLabs uses default retention and can retain audio and transcripts. | Processing in the USA, Netherlands, and Singapore; storage in the United States. |
Lab-funded AI providers
When you select Lab funding for an agent Session, Vercel AI Gateway routes requests to providers that serve the selected model. These can include Anthropic, OpenAI, and SpaceXAI, or other hosting providers used by the Gateway for that model. They receive prompts, responses, and supplied content under Podclave’s Gateway access. This does not require your personal subscription. Provider data-use rules and processing locations apply; personal account settings do not control these requests. See the Gateway model and provider list.
Additional compute hosting
Hetzner Online GmbH hosts compute for customers on that infrastructure. It processes their code, files, commands, session data, and runtime traffic in the United States. Worlds compute uses Vercel.
2. Connected services you authorize
These activate only if you connect them, and you can revoke each one — in Podclave and at the provider — at any time.
| Provider | Role | Data |
|---|---|---|
| Anthropic, PBC | Makes Claude available when you connect your account. | Sign-in and account information. Prompts, responses, and content supplied to Claude. Requests use your selected account access. |
| OpenAI OpCo, LLC | Makes Codex available when you connect your account or API key. | Sign-in and account information, or API requests under your key. Prompts, responses, and content supplied to Codex. Requests use your selected account access. |
| SpaceXAI LLC | Makes Grok available when you connect your account. | Sign-in and account information. Prompts, responses, and content supplied to Grok. Requests use your selected account access. |
| GitHub, Inc. | Supplies repository access through connected personal credentials or a World GitHub App installation. | Account and installation information, repository files, commits, and other GitHub operations you request. Access is limited by the authorization granted. |
| Atlassian (Bitbucket Cloud) | Supplies repository access through repository access tokens that a World Admin adds, or a World Admin’s own Bitbucket API token for read-only access to selected repositories. | Account email for an Admin’s token, repository files, commits, and other Git operations you request. Access is limited by the token’s permissions. |
| Google LLC (Google Drive and Google Workspace APIs) | A World Admin connects Shared Drives. For each one, the Admin adds a dedicated Podclave-created service account with a chosen Google role. Podclave then offers fixed agent tools within that Drive. | Shared Drive and file ids, names, metadata, search terms, requested Google Doc text, and content supplied for creates or edits. Requested Doc text also goes to Google Cloud Model Armor before it reaches an agent. Google remains the source of truth. |
| Slack Technologies, LLC | Supplies public-channel discussion through the World’s connected app and bot, with posting if a World Admin enables it. | Connection and bot details, channel information, messages, threads, author references, source links, requested attached files (including images, audio, video, and documents), file details, available previews or transcripts, names and Slack identities for enabled user lookup, and content supplied for posts or replies. Requested message text, file details, and available previews or transcripts also go to Google Cloud Model Armor before they reach an agent. Original files pass into the requesting member’s private Workspace for their agent to process. Every World member can use the enabled access, including people without a personal Slack account. |
3. Client-side page resources
Podclave serves its own fonts, scripts, and styles from its own origin — these page assets do not send your IP address to a separate font or asset CDN. Pages that show GitHub accounts load avatar images from GitHub, which receives your IP address. Chat messages and file previews can show images or other content from web addresses in that content; your browser loads them from those sites, which receive your IP address. The sign-in page also loads Cloudflare Turnstile, covered as our bot-protection subprocessor in section 1 and in the Cookie Policy.
Optional voice dictation is not a page asset. After the user accepts the mic notice and taps the mic, the browser opens a direct connection to ElevenLabs for that dictation session. No ElevenLabs request is made only by loading a Podclave page.
If you turn on browser notifications, the push service your browser uses (for example Apple, Google, or Mozilla) carries notification content, encrypted for your device.
Questions about any of these: hello@podclave.com.