Subprocessors
Last updated on
This page lists the third parties that process personal data on behalf of ProductBridge customers in connection with the Services, as referenced in Schedule 3 of our Data Processing Agreement (productbridge.io/legal/data-processing-agreement). Which providers actually process your data depends on the features you use and the sources you connect.
Authorized subprocessors
Provider | Service / purpose | Personal data processed | Primary location / safeguards |
|---|---|---|---|
Amazon Web Services (AWS) | Cloud hosting, compute, PostgreSQL database infrastructure, file and object storage | Customer workspace data and associated metadata as required by the Services | Production in Paris (EU); backups in Germany (EU) |
Qdrant Cloud | Vector search used for duplicate detection and semantic search | Embeddings derived from feedback text | Frankfurt (EU) |
Anthropic | AI-assisted analysis, classification, summarization and related ProductBridge AI features | Feedback text, workspace content and limited related context required for the requested AI feature | United States; SCCs and provider terms that prohibit training on submitted data |
OpenAI | AI-assisted analysis, classification, summarization and the support agent | Feedback and conversation text and limited related context required for the requested AI feature | United States; SCCs and provider terms that prohibit training on submitted data |
Voyage AI | Text embeddings for semantic search | Feedback text | United States; SCCs |
Resend | Transactional email delivery and ProductBridge notifications | Recipient email address, recipient name where available, and notification content required for delivery | United States; SCCs |
Brevo | Marketing contact sync for Customer administrators | Email addresses of Customer administrators | European Union |
Cloudflare | DNS, CDN and custom domains | Traffic metadata | Global edge network; SCCs |
Inngest | Background job orchestration | Job payloads, which may include references to workspace content | EU region; SCCs where applicable |
Intercom | Customer support and support communication for ProductBridge's own helpdesk | Customer administrator contact details and support conversation content voluntarily provided through support interactions | United States; SCCs |
What is not a subprocessor
Integrations you connect yourself. Intercom, Zendesk, Slack, Jira, Linear, ClickUp, GitHub, Salesforce, Discord and similar tools only receive data once you connect them, on your instruction. Disconnecting the integration stops the flow. Intercom appears in the list above only because ProductBridge uses it for its own customer support desk.
Self-hosted components. Better Auth and PostgreSQL run inside ProductBridge's own infrastructure and are not third-party subprocessors.
Monitoring configured to exclude personal data. Application logging and uptime monitoring is configured so the monitoring provider does not intentionally receive customer personal data.
How we add or replace a subprocessor
We give at least fifteen (15) days' notice before a new subprocessor starts processing customer personal data, unless a shorter period is reasonably necessary because of an emergency, security need or legal requirement.
To receive notices by email, write to help@productbridge.io with "subprocessor notices" in the subject line.
You may object on reasonable, documented data protection grounds within the notice period. We will work with you in good faith to resolve the objection, which may include disabling the affected feature.
Every subprocessor is bound by written data protection terms no less protective than our Data Processing Agreement, and we remain responsible for their performance.
Change log
9 September 2026: page published. Added Anthropic as an AI provider alongside OpenAI. Microsoft Azure removed; production runs on AWS only.
Related documents
Data Processing Agreement: productbridge.io/legal/data-processing-agreement
Security: productbridge.io/security
GDPR Policy: productbridge.io/legal/gdpr-policy
Privacy Policy: productbridge.io/legal/privacy-policy
