Effective November 13, 2026
Subprocessors
The third parties that process customer data so we can provide Pixelbase, and what each one does.
Current Subprocessors
These are the vendors Pixelbase Inc uses to process Customer Data in providing the Services, under the Data Processing Addendum. Each is bound by written data protection terms at least as protective as the DPA.
| Subprocessor | Purpose | Customer Data | Location |
|---|---|---|---|
| Vercel Inc. | Application hosting, compute and content delivery | All Customer Data, in transit through the application | United States |
| Supabase, Inc. | Primary database, file storage and realtime messaging | All Customer Data | United States |
| Amazon Web Services, Inc. | Encrypted off-site database backups | Encrypted database backups | United States |
| GitHub, Inc. | Runs the scheduled backup job, which encrypts the backup before it is stored | Database contents, transiently, while a backup is taken | United States |
| Stripe, Inc. | Billing, and processing the payments Customers accept from End Customers | Billing contacts, payment details, and End Customer payment records | United States |
| Twilio Inc. | SMS, voice calls and phone verification | Phone numbers, and the content of messages and calls | United States |
| Resend | Sending and receiving email | Email addresses and the content of email | United States |
| Anthropic, PBC | AI features, such as agents and document extraction | The content an AI feature is asked to work on | United States |
| 100ms | Video meetings and meeting recordings | Participants' names, audio, video and recordings | Routed to the nearest 100ms region |
| Google LLC | Address lookup and delivery routing (Google Maps Platform) | Addresses | United States |
| Gusto, Inc. | Payroll, for Customers who enable it | Employee, compensation, tax and bank details | United States |
Services You Connect
Integrations a Customer chooses to connect — its own identity provider, an AI agent or app it authorizes, a calendar or music account — receive data at the Customer's direction and under the Customer's own agreement with that provider. They are not Pixelbase subprocessors.
Changes
Before a new subprocessor begins processing Customer Data, we update this page and notify each company's owner by email at least 30 days in advance, as the DPA describes. To object to a change, write to support@pxb.app.