Subprocessors

ReferenceOS · Effective September 6, 2026

This register identifies the core third-party providers currently used to operate deployed ReferenceOS environments. We keep this list intentionally concrete rather than listing vendors we might use someday.

Current core subprocessors

Supabase

Purpose: Database, authentication, APIs, and private file storage

Data involved: Account, workspace, customer/reference, project, permission, media metadata, authentication, and operational data as required by the enabled ReferenceOS features.

Vercel

Purpose: Application hosting and delivery

Data involved: Application requests and technical delivery/security data needed to serve deployed ReferenceOS environments. Private workspace records remain stored in the ReferenceOS data layer rather than intentionally being published through Vercel.

Stripe

Purpose: Subscription billing and payment processing

Data involved: Account and organization billing metadata, subscription and invoice state, plan and seat information, payment-processor identifiers, and transaction status needed to operate paid ReferenceOS plans. Raw card numbers are handled by Stripe rather than stored by ReferenceOS.

Changes to this register

We will update this page before enabling a new material subprocessor that will process customer personal data for the Service. Enterprise agreements or data-processing addenda may provide additional notice or objection terms.

Questions

Privacy or data-processing questions can be sent to privacy@referenceos.app. Security reports can be sent to security@referenceos.app.