Legal

Subprocessors

The third parties that process customer data on CCD Suite managed cloud, what each one does, and which apply when you self-host.

Last updated 2026-10-03

Managed cloud

  • SupabaseDatabase, authentication, file storageData: All workspace data, user accounts, uploaded filesCloud only
  • VercelWeb app hostingData: Requests and responses passing through the web appCloud only
  • RailwayHosting for the AI service and backend workersData: Agent requests, workspace data the agents readCloud only
  • UpstashRedis for rate limiting and the background job queueData: Rate-limit counters and queued job payloadsCloud only
  • AnthropicLanguage model for the agentsData: Prompts and the workspace context sent with themCloud. Self-host only if the operator adds an Anthropic key
  • OpenAISearch embeddingsData: Text being indexed for searchCloud. Self-host only if the operator adds an OpenAI key
  • ResendTransactional emailData: Recipient address and message contentCloud. Self-host only if the operator configures it
  • StripeSubscription billingData: Billing contact and payment detailsCloud only
  • SentryError monitoringData: Error reports and the request context attached to themCloud. Self-host only if the operator sets a DSN
  • AyrshareSocial publishingData: Posts you publish and their engagement metricsOnly if you use the Social module (cloud or self-host)

Tools you connect

When you connect Google Workspace, HubSpot, Salesforce, QuickBooks, or Stripe, CCD reads from an account you already hold with that provider. Those providers process your data under your own agreement with them, not as our subprocessors.

Self-host

A self-hosted install runs on your own infrastructure and uses none of the processors above except the ones your operator configures. With the bundled local model, no AI provider is involved at all.

Related

See the Data Processing Addendum and the Security page. Questions: hello@ccdsuite.com.