Subprocessors

Last updated: February 12, 2026

FaceShot uses the following third-party service providers (subprocessors) to deliver our service. Each subprocessor processes personal data on our behalf and is bound by data protection agreements compliant with the GDPR.

Railway
Purpose: Cloud hosting and infrastructure
Location: United States
Data: Application data, user data, logs
Cloudflare
Purpose: CDN, DNS, and security
Location: United States (global edge)
Data: IP addresses, request metadata, cached content
Stripe
Purpose: Payment processing
Location: United States
Data: Payment information, billing details, transaction history
Anthropic
Purpose: AI processing and content analysis
Location: United States
Data: Processing inputs, generated content
Google Cloud Platform
Purpose: Cloud services and AI processing
Location: European Union
Data: Application data, processing inputs
RunPod
Purpose: GPU cloud computing
Location: United States
Data: Processing inputs and outputs
GetMailer
Purpose: Transactional email delivery
Location: European Union
Data: Email addresses, email content, delivery logs
GitHub
Purpose: Code hosting and CI/CD
Location: United States
Data: Source code, deployment logs

All subprocessors with data transfers outside the EEA have Standard Contractual Clauses (SCCs) or equivalent safeguards in place.

We will notify you of any changes to our subprocessors. If you have concerns about a subprocessor, please contact us.

Questions about our subprocessors?

Contact our Data Protection Officer at dpo@getplatform.co

This list is reviewed and updated as our service providers change.