Sub-processors
Last updated: 2026-05-28
OrderPier engages the third-party service providers below to deliver the service. Each is bound by a written data-processing agreement aligned to GDPR Article 28. We commit to 30 days' advance notice of any addition or material change.
To subscribe to change notices, email subprocessor-updates@orderpier.com.
| Provider | Purpose | Data | Region | DPA |
|---|---|---|---|---|
| Google LLC (Gemini API) | LLM inference for PO extraction | Email body & attachments processed during extraction | United States | View |
| Anthropic, PBC | LLM inference for PO extraction | Email body & attachments processed during extraction | United States | View |
| PostHog, Inc. | Product & website analytics | Usage events, page views, device/browser metadata, user + org id | European Union (eu.posthog.com) | View |
| Amazon Web Services (SES, S3, SNS) | Inbound email ingress + raw message storage. Outbound transactional email | Email contents, attachments, sender metadata, raw MIME | EU (eu-west-1, Ireland) | View |
| Fly.io | Application hosting + compute (marketing site, dashboard, workers) | App traffic, auth tokens, email payloads processed in-memory | United States (iad) + global edge | View |
| Neon (managed Postgres) | Primary datastore | All customer data, extracted orders, audit log, attachment metadata | EU (eu-west-2, London) | View |
| Clerk Inc. | Authentication & organization management | User identity, session tokens, organization memberships | United States | View |
| Stripe Inc. | Billing & subscription management | Billing contact, payment method, invoice history | United States | View |
International transfers
For data subjects in the EU/EEA, UK, and Switzerland, transfers to US-based sub-processors are governed by the 2021 EU Standard Contractual Clauses (Module 2) plus the UK International Data Transfer Addendum, annexed to our DPA.