Sub-processors
Last updated 2 November 2026
Who handles your data for us
These companies process personal data on our behalf, only to provide their service to us. We tell you here before adding or changing one. Read more in our privacy policy.
| Company | What it does | Data it handles | Where | Status |
|---|---|---|---|---|
| Supabase | Database, sign-in and account emails | Account details, interview answers, ideas, reports, Ask Nanda messages, support messages, consent records | Singapore (Amazon Web Services) | In use |
| Google (Gemini API) | AI that writes ideas, reports and Ask Nanda answers, with web research | Interview answers, plan details and questions you ask Nanda | United States and other countries | In use during the beta |
| Google (Sign in with Google) | Signing in, if you choose Google | Name and email address | United States and other countries | In use |
| Cloudflare (Turnstile) | Checking that forms are sent by people, not bots | IP address and technical browser signals | Global network | Not yet in use |
| Anthropic (Claude API) | AI for ideas, reports and Ask Nanda, replacing Gemini | Interview answers, plan details and questions you ask Nanda | United States | Not yet in use (planned for launch) |
| Vercel | Hosting the website | Technical request data such as IP address | Global network, servers near Singapore | Not yet in use (planned for launch) |
| Payment provider | Taking payments and handling tax | Name, email, payment details (we never see card numbers) | To be confirmed | Not yet in use (payments are off) |
Data that leaves your country
Some of these companies process data outside the country you live in. Where the law requires it, for example for data from the European Union or the UK, we only use companies that sign data protection terms with us, including the European Commission's Standard Contractual Clauses (or the UK equivalent).