Legal · Subprocessors
Subprocessors
Last updated · 27 May 2026 · v1.2 · Updated whenever the list changes
Palanor relies on the following subprocessors to operate the Enterprise Intelligence Platform. Each is contractually bound to confidentiality, security, and to processing data only as instructed by Palanor. Customers can subscribe to subprocessor updates at privacy@palanor.comand will receive at least 30 days’ notice of any change.
| Subprocessor | Service | Location | Data |
|---|---|---|---|
| Vercel, Inc. | Application hosting (Next.js) | USA · AWS us-east | App logs, request metadata |
| Supabase, Inc. | Postgres database, auth, object storage | USA · AWS us-east | All Customer Data |
| Anthropic, PBC | LLM inference (Claude) | USA | Prompts and contextual data passed to model calls; not retained for training under our subprocessor agreement |
| Resend | Transactional email | USA | Outbound email content + recipient address |
| Stripe, Inc. | Payments (Stripe Atlas, billing) | USA + EU | Billing identifiers, payment method (tokenized) |
| OpenAI, LLC | Text embeddings; gpt-image-1 for news-image generation when no public-domain match exists | USA | Text passed to the embeddings + image endpoints; not retained for training under our subprocessor agreement |
| ElevenLabs, Inc. | Text-to-speech (Numen voice reader) | USA | Text passed to the synthesis endpoint to generate audio; not retained for training |
| Cloudflare, Inc. | DNS, domain registrar (palanor.com, .ai, .org, .net, .io, .info, .co, .dev, .app) | USA · global edge | DNS queries; no Customer Data passes through Cloudflare |
| Marketaux, s.r.o. | Financial news aggregation across 30+ publishers; entity-tagged, sentiment-scored feed used as a source of raw articles for Palanor synthesis | EU (Czech Republic) | No Customer Personal Data sent; we pull their published article metadata (titles, summaries, source URLs, images, entity tags) and synthesize on our side. Marketaux Standard tier license explicitly permits derivative LLM summaries with source attribution. |
All subprocessor transfers outside the EEA are covered by EU Standard Contractual Clauses (Module Two, Controller to Processor) and the UK International Data Transfer Addendum. Subprocessor data processing agreements are available on request via privacy@palanor.com.