01
Clerk
Function Authentication & account management
Purpose User identity, sign-in/sign-up, sessions, and multi-factor authentication.
Data region United States
Sub-processors
Sub-processors and data providers.
The third parties that process data on ErmisAI's behalf to run the product. We disclose material changes to this list as required by our Data Processing Agreement.
Last updated 25 June 2026
Why this list exists
Under the GDPR, ErmisAI discloses the sub-processors it relies on to deliver the service. Each entry lists the provider, what it is used for, and the region where it primarily processes data. This page is the public source of truth referenced by our Privacy Notice and GDPR page.
Active sub-processors
02
CapyDB (Postgres)
Function Primary database
Purpose System of record for workspace data, editorial content, and settings.
Data region European Union - Hetzner (Helsinki, Finland)
03
Upstash (Redis)
Function Cache, rate limiting & queues
Purpose Ephemeral state, rate-limit counters, in-flight reservations, and job queues.
Data region European Union / United States (regional endpoint)
04
Polar
Function Billing & subscription management
Purpose Plans, checkout, invoices, and payment processing (card data handled by Polar).
Data region United States
05
Vercel (Hosting + Blob storage)
Function Application hosting, edge delivery & object storage
Purpose Serverless compute, routing, CDN, and Blob object storage for uploaded media and payload archives (archives on a private ACL). Primary compute region is Stockholm (arn1).
Data region European Union (arn1, Stockholm) + global edge; Blob storage in Vercel-managed regions
06
Vercel AI Gateway + Azure OpenAI
Function AI model inference
Purpose Synthesis, compose (Lyra), clustering, and refinement. Prompt/response content is not retained for training.
Data region European Union / United States (Azure regions)
07
Resend
Function Email delivery
Purpose Transactional and marketing email, bounce/complaint handling, and suppression.
Data region United States
08
Sentry
Function Error & performance monitoring
Purpose Application error and performance telemetry. Client-side telemetry loads only after cookie consent.
Data region European Union (Germany)
Changes
01
Updates and notifications
We keep this list current and notify customers under contract of material changes to our sub-processors:
- New sub-processors are added as product functionality expands (for example, new integrations or AI capabilities).
- Material changes are disclosed in advance, as set out in the Data Processing Agreement, so customers can review them.
- Significant changes in data handling - such as a sub-processor changing its primary region - are communicated to customers under contract.
- Customers under contract may object to a new sub-processor within the notice period; objections are handled per the DPA.
02 · Questions
For questions about a sub-processor, data transfers, or to request the Data Processing Agreement, contact privacy@ermisai.com.