Current authorized subprocessors
The list below applies to the production Services. A provider receives only the data needed for its function. Optional providers process data only when their related feature is enabled.
| Provider | Purpose and data | Primary location |
|---|---|---|
| Railway Corporation | Application hosting, compute, databases, cache, queues, and platform logs; Customer Personal Data processed by the Services. | United States |
| Stripe, LLC | Subscriptions, billing, invoicing, and metered usage; account identity, billing details, plan, and usage records. | United States and global |
| PostHog, Inc. | Optional product analytics after consent; account identifiers, page and product events, device and network data. | United States |
| Functional Software, Inc. (Sentry) | Error and performance monitoring when enabled; diagnostic context, request metadata, and error details. | United States |
| Plus Five Five, Inc. (Resend) | Transactional and monitoring email when enabled; recipient address and message content. | United States |
Customer-selected recipients
Callback endpoints, monitoring webhook destinations, and notification recipients selected by a customer are not PagePith subprocessors. PagePith transmits data to them on the customer’s instruction.
Optional independent services
Google and GitHub process identity information under their own terms when a user chooses social sign-in. They may act as independent controllers rather than PagePith subprocessors. Card networks and financial institutions may likewise process payment data independently.
Change notices and objections
PagePith will update this page at least 30 days before a new or replacement subprocessor begins processing Customer Personal Data. To receive change notices or object on reasonable data-protection grounds, email support@pagepith.com. The process is described in the Data Processing Addendum.