Sub-Processors
Last updated: 7/16/2026
This page lists the third-party sub-processors MoldMind engages to deliver the Service. We update this list as our infrastructure evolves and notify customers of material changes via the in-app acceptance flow.
Active Sub-Processors
Authentication & Organization Management
| Vendor | Purpose | Data Categories | Location |
|---|---|---|---|
| Clerk | User authentication, organization memberships, session tokens | User identity (name, email, password hash), organization data | US |
Data Storage
| Vendor | Purpose | Data Categories | Location |
|---|---|---|---|
| Supabase | Primary database (Postgres) + object storage | All structured customer data; uploaded photos, audio, documents, branding, reports, inspector-signatures | US |
AI Services
| Vendor | Purpose | Data Categories | Location |
|---|---|---|---|
| Anthropic | LLM inference (Claude) for report narrative, photo classification, document parsing; accessed via the Vercel AI Gateway | Report-generation prompts (inspector notes, voice memo transcripts, document text, photos for vision) | US |
| Deepgram | Audio transcription | Voice memo audio + transcripts | US |
| OpenAI | Text-embedding model (text-embedding-3-large) for the correction-pair learning and retrieval (RAG) features; accessed via the Vercel AI Gateway | Short text snippets derived from inspector correction pairs and support/help questions, vectorized for similarity search (no photos or audio) | US |
Billing
| Vendor | Purpose | Data Categories | Location |
|---|---|---|---|
| Stripe | Subscription billing, payment processing | Payment methods, billing addresses, transaction history (we do NOT store card numbers) | US |
Communications
| Vendor | Purpose | Data Categories | Location |
|---|---|---|---|
| Resend | Transactional + regulatory email delivery | Recipient email addresses, email content | US |
Infrastructure
| Vendor | Purpose | Data Categories | Location |
|---|---|---|---|
| Vercel | Application hosting + serverless functions | HTTP request/response logs, deployment artifacts, edge cache | US |
| Railway | Gotenberg PDF rendering service | Transient HTML during render (no persistent storage) | US |
| Sentry | Error monitoring | Error stack traces (client-side PII scrubbed) | US |
| Inngest | Background job processing | Event payloads (org IDs, job IDs, processing metadata) | US |
| Upstash | Rate limiting + ephemeral cache (Redis) | Counters, cache keys (no PII) | US |
| Slack | Internal operational + business alert delivery to MoldMind staff (incoming webhooks) | Alert metadata — organization names, internal IDs, plan/billing event details, and limited contact identifiers (e.g. a new sign-up, lead, or support email address contained in an alert) | US |
Material Changes
We notify customers of material changes to this sub-processor list at least thirty (30) days before the change takes effect, via the in-app material-change acceptance flow (banner + email + acceptance modal). Minor changes are recorded here without notification.
Contact
For sub-processor questions or to request copies of executed DPAs:
MoldMind LLC 2389 Main Street, Suite 100 Glastonbury, CT 06033 legal@moldmindai.com