01
Clerk
Function Authentication & account management
Purpose User identity, sign-in/sign-up, sessions, and multi-factor authentication.
Data region United States
Sub-processors
Sub-processors and data providers.
The third parties that process data on ErmisAI's behalf to run the product. We disclose material changes to this list as required by our Data Processing Agreement.
Última actualización: 25 de junio de 2026
Why this list exists
Under the GDPR, ErmisAI discloses the sub-processors it relies on to deliver the service. Each entry lists the provider, what it is used for, and the region where it primarily processes data. This page is the public source of truth referenced by our Privacy Notice and GDPR page.
Active sub-processors
02
CapyDB (Postgres)
Function Base de datos principal
Purpose Sistema de registro para los datos del workspace, el contenido editorial y la configuración.
Data region Unión Europea - Hetzner (Helsinki, Finlandia)
03
Upstash (Redis)
Function Cache, rate limiting & queues
Purpose Ephemeral state, rate-limit counters, in-flight reservations, and job queues.
Data region European Union / United States (regional endpoint)
04
Polar
Function Billing & subscription management
Purpose Plans, checkout, invoices, and payment processing (card data handled by Polar).
Data region United States
05
Vercel (Hosting + Blob storage)
Function Alojamiento de la aplicación, entrega en el edge y almacenamiento de objetos
Purpose Cómputo serverless, enrutamiento, CDN y almacenamiento de objetos Blob para los medios subidos y los archivos de payload (archivos con ACL privada). La región principal de cómputo es Estocolmo (arn1).
Data region Unión Europea (arn1, Estocolmo) + edge global; almacenamiento Blob en regiones gestionadas por Vercel
06
Vercel AI Gateway + Azure OpenAI
Function AI model inference
Purpose Synthesis, compose (Lyra), clustering, and refinement. Prompt/response content is not retained for training.
Data region European Union / United States (Azure regions)
07
Resend
Function Email delivery
Purpose Transactional and marketing email, bounce/complaint handling, and suppression.
Data region United States
08
Sentry
Function Error & performance monitoring
Purpose Application error and performance telemetry. Client-side telemetry loads only after cookie consent.
Data region European Union (Germany)
Changes
01
Updates and notifications
We keep this list current and notify customers under contract of material changes to our sub-processors:
- New sub-processors are added as product functionality expands (for example, new integrations or AI capabilities).
- Material changes are disclosed in advance, as set out in the Data Processing Agreement, so customers can review them.
- Significant changes in data handling - such as a sub-processor changing its primary region - are communicated to customers under contract.
- Customers under contract may object to a new sub-processor within the notice period; objections are handled per the DPA.
02 · Questions
For questions about a sub-processor, data transfers, or to request the Data Processing Agreement, contact privacy@ermisai.com.