Sub Processors
Sub-processors
Last updated: 27 September 2026
SuperPath uses a small number of trusted third parties, called sub-processors, to host and deliver the SuperPath platform. This page lists each one, what it does for us, the personal data it processes and where.
Every sub-processor is bound by a written agreement that requires it to protect customer personal data to the standard required by data protection law, and SuperPath remains responsible for their compliance, as set out in our Customer Data Processing Agreement. Sub-processors only process personal data to provide the specific service described below.
Where your data is hosted
Your SuperPath data is stored in the region your account was created in: the United States, Australia or the European Union (Germany). The locations below show where each sub-processor handles data for each region.
Infrastructure
The core platform. These providers host and run SuperPath itself.
Sub-processor | Purpose | Personal data processed | Location |
|---|---|---|---|
Google Cloud Platform | Cloud hosting: application servers, database, file storage, backups and reporting | All categories of personal data | United States, Australia or European Union, matching your SuperPath region |
Cloudflare | Domain name services, content delivery and network security for SuperPath's websites and services | Personal data in transit, such as IP addresses and the content of requests | Global network |
Artificial intelligence
SuperPath's AI features. Your data is never used to train these providers' models.
Sub-processor | Purpose | Personal data processed | Location |
|---|---|---|---|
Google Cloud Vertex AI (Anthropic Claude models) | The SuperPath AI assistant, in the web app and in Slack | The admin's question and the SuperPath data needed to answer it | United States for US and Australian customers, European Union for EU customers |
OpenAI | AI features that generate forms, text, knowledge content and career roadmaps, and help summarise and moderate discussions | The content and prompts provided for generation, which may include names | United States |
Service specific
Providers of specific functions within SuperPath.
Sub-processor | Purpose | Personal data processed | Location |
|---|---|---|---|
Typesense | Search | All categories of personal data | United States / Australia / Germany |
Pusher | Real time updates and notifications in the web app | Name, user identifier and notification content | United States / Australia / Germany |
Postmark | Email delivery | First name, last name, email address, email content | United States |
PostHog | Product analytics | First name, last name, email address, application usage data | United States |
Crisp | Customer support and our help centre | First name, last name, email address, support conversations | European Union (Netherlands) |
Calendly | Meeting bookings | First name, last name, email address | United States |
Stripe (optional) | Payments, for customers who pay by card | First name, last name, email address | United States |
Integrations you choose to connect
When you connect SuperPath to another service, such as Slack, Microsoft Teams or your HR system, SuperPath exchanges data with that service on your instruction. Those services are chosen and contracted by you, so they are not SuperPath sub-processors, and their handling of data is governed by your own agreement with them.
Changes to this list
We will update this page before we engage a new sub-processor. If you have a question about any sub-processor, or would like to be told about changes, contact us at privacy@superpath.io.