Service Providers (Subprocessors)
Last updated: 2026-01-01
This page lists subprocessors (processors we engage) for purposes of our Data Processing Agreement (DPA) in B2B contexts (GDPR Art. 28). These subprocessors may process personal data contained in Customer Content (e.g., faces/voices in uploaded videos) on our behalf to provide the Service.
Subprocessors
| Subprocessor | Purpose | Typical data | Typical processing location / transfers | Notes |
|---|---|---|---|---|
| Cloudflare (Pages/Workers/CDN) | Hosting, delivery, security | Website/app requests, IP address, logs; data transmitted to/from the Service | Cloudflare global infrastructure; may involve processing outside the EEA/UK | Edge delivery and security. |
| Cloudflare (R2) | Object storage for uploaded files and outputs | Uploaded files/outputs and related object metadata | Cloudflare global infrastructure; may involve processing outside the EEA/UK | We use Cloudflare R2 for object storage. |
| Convex | Database and backend application platform | Project metadata, job state, account data | May involve processing outside the EEA/UK | Stores application data needed to provide the Service. |
| Modal | CPU/GPU compute for processing jobs | Customer Content during processing, processing metadata | May involve processing outside the EEA/UK | Executes video processing workloads. |
| OpenRouter | LLM routing layer for AI features | Prompts/instructions and model outputs (as provided by users) | May involve processing outside the EEA/UK | Routes content to downstream model providers; may process usage metadata (e.g., model, timestamps, usage/cost). |
| Google (Gemini) via OpenRouter | Model inference | Prompts/instructions and model outputs (as provided by users) | May involve processing outside the EEA/UK | Provider retention may vary according to provider policy. |
| xAI (Grok) via OpenRouter | Model inference | Prompts/instructions and model outputs (as provided by users) | May involve processing outside the EEA/UK | Provider retention may be up to 30 days according to provider policy. |
Changes
We may update this list as our infrastructure changes. Where a Data Processing Agreement (DPA) applies, the DPA describes how we notify you about changes and how you can object on reasonable data protection grounds.
Contact
Questions about this list: contact@clipdone.app