Subprocessors

1. Core service providers

• Supabase — authentication and PostgreSQL database infrastructure.
• Vercel — public website and control-plane hosting.
• Railway — data-plane and supporting service hosting.
• Upstash — managed Redis used for bounded runtime configuration, rate controls, and short-lived lifecycle state.
• Microsoft 365 — transactional and operational email delivery.
• Stripe — payment, subscription, invoice, and tax-related processing when billing features are used.
• Cloudflare — domain, network, DNS, certificate, or edge services where configured.

2. Optional providers

• Google — OAuth identity and optional consent-based analytics where enabled.
• GitHub — OAuth identity where enabled.
• OpenAI — privacy-bounded assistant processing only when explicitly enabled; context is restricted to approved categories and is designed to exclude raw credentials, bodies, URLs, email addresses, and workspace identifiers.

3. Processing boundaries

A provider receives only the information reasonably needed for its function. Availability and exact processing location may depend on the selected service region and customer configuration. ThrottleProxy does not authorize subprocessors to use customer information for their own unrelated marketing.

4. Changes and objections

We may update this list as infrastructure changes. Customers with a signed data processing addendum may receive any notice and objection rights stated in that agreement. Contact info@throttleproxy.com for current transfer or contractual information.