Skip to main content

Subprocessors

These providers support the current production service. A provider receives only the data required for its configured service, and optional features do not process customer content when they are not enabled or used.

Reviewed September 15, 2026
OASIS production subprocessors and processing purposes
ProviderPurposeData involvedUse
VercelApplication hosting and private object storageAccount, application, asset, request, and operational dataU.S. production posture
NeonManaged PostgreSQL database infrastructureWorkspace, identity, configuration, content, analytics, audit, and governance recordsU.S. production posture
ResendTransactional email deliveryRecipient email address and the transactional message being deliveredVerification, invitations, notifications, and configured report delivery
OpenRouterGateway for optional AI-assisted featuresApproved prompt and workflow context submitted when an enabled AI feature is usedOptional; governed by tenant and workflow policy

Control details

Connected social networks

  • Customer-selected networks act as independent platforms or integration recipients.
  • Availability and data handling depend on the customer connection and provider terms.

Customer-directed services

  • An organization may configure a SAML identity provider, webhooks, SMTP, S3-compatible storage, data lakes, or other destinations.
  • The customer agreement determines how those selected services are classified.

Change management

  • Material processor changes are evaluated for purpose, data scope, security, and regional impact.
  • The applicable DPA governs contractual notice commitments.

Important: This list describes the standard production service as of the review date. The signed order form and DPA control for a specific customer configuration.