Sub-processors
Last updated 3 July 2026
PenClip uses a small set of trusted third-party providers to operate the platform. Each processes personal data only on our behalf, under a data processing agreement, and only to the extent needed to deliver its service. This page lists our current sub-processors.
Current sub-processors
| Provider | Purpose | Primary location |
|---|---|---|
| Clerk | User authentication and identity | United States |
| Supabase | Application database and metadata storage | United States / EU (project region) |
| Cloudflare R2 | Encrypted document storage | Global edge (customer-region bucket) |
| Google (Gemini API) | AI dictation, briefings, and insight generation | United States |
| Stripe | Subscription billing and payment processing | United States / Ireland |
| Resend | Transactional and invitation email delivery | United States |
| PostHog | Product analytics and reliability monitoring | United States |
| Vercel | Application hosting and content delivery | United States / global edge |
Notice of changes
We may add or replace sub-processors as the platform evolves. Material changes will be reflected on this page. To be notified of updates, or to raise a concern about a sub-processor, contact hello@getpenclip.com.