Subprocessors
Last updated: March 20, 2026
DekAI uses the following third-party subprocessors to operate the Service. This list is maintained in accordance with our Data Processing Addendum and GDPR Article 28 requirements.
We will notify subscribed customers by email at least 30 days before adding a new subprocessor. You may object to a new subprocessor by contacting privacy@dekai.ai.
| Subprocessor | Purpose | Data Processed | Region |
|---|---|---|---|
| Vercel | Application hosting and CDN | Web requests, server logs | US (edge: global) |
| Supabase (PostgreSQL) | Primary database | All account and business data | US |
| Stripe | Payment processing | Payment method, billing address, email | US |
| Resend | Transactional email | Email address, email content | US |
| OpenAI | AI probe queries, action plan generation | Business name, city, state, vertical | US |
| Anthropic | AI probe queries, action plan generation | Business name, city, state, vertical, report context | US |
| OpenRouter (Google Gemini) | AI probe queries (Gemini model) | Business name, city, state, vertical | US |
| OpenRouter (Perplexity) | AI probe queries (Perplexity model) | Business name, city, state, vertical | US |
| Google Places API | Business profile lookup, SERP audit | Business name, location | US |
| Upstash | Redis queue for background jobs | Job metadata (IDs, status) | US |
| Google Analytics (GA4 Data API) | Analytics data sync for AI influence modeling | Aggregated GA4 metrics (sessions, engagement, conversions, traffic sources) | US |
| Google Search Console API | Search performance data sync | Search queries, impressions, clicks, position data | US |
| PostHog | Product analytics | Anonymous usage events, page views | US (EU hosting available) |
Changes to This List
When we add or replace a subprocessor, we update this page and notify active subscribers. Previous versions of this list are available upon request.