Subprocessors
Effective May 10, 2026
A complete, up-to-date list of every third party Tudo uses to deliver the Service. We notify active customers in advance of any change.
1.What this list is
A subprocessor is any third party that processes personal data on Tudo's behalf when we deliver the Service. We use the smallest set of subprocessors we can, and only the ones we genuinely need.
Each row below names the vendor, what they do for us, where they sit, and a link to their public Data Processing Addendum (DPA).
2.Our active subprocessors
| Vendor | Purpose | Location | DPA |
|---|---|---|---|
| Supabase | Database, authentication, file storage | United States (AWS us-east-1) | supabase.com/legal/dpa |
| Vercel | Application hosting, edge runtime, CDN | Global edge network | vercel.com/legal/dpa |
| Stripe | Payment processing, subscription billing, invoicing | United States, with EU/UK representatives | stripe.com/legal/dpa |
| Resend | Transactional email delivery (sign-in, invites, billing) | United States | resend.com/legal/dpa |
| Anthropic | AI features (zero data retention, no training on your data) | United States | anthropic.com/legal/dpa |
| Sentry | Error monitoring and performance telemetry | United States | sentry.io/legal/dpa |
| Cloudflare | DDoS protection, real-time edge state | Global edge network | cloudflare.com/cloudflare-customer-dpa |
3.How we vet subprocessors
Before adding any new subprocessor, we check that they:
- Sign our DPA (or have a public DPA at least as protective as ours).
- Implement appropriate technical and organizational security measures.
- Are based in or transfer data to a jurisdiction with appropriate safeguards.
- Have a documented incident-response and breach-notification process.
4.Notification of changes
We notify active customers by email at least 30 days before adding, removing, or materially changing any subprocessor on this list. Customers may object to the change in writing during the notice period; if we can't accommodate the objection, the customer may terminate the affected subscription with a pro-rata refund.