Subprocessors
Last updated: August 31, 2026
Brock Data, Inc ("Brock") uses the third-party providers below to deliver the Brock Transform service. Each processes personal information on our behalf under a written contract. This list supplements section 6 of our Privacy Policy and the Data Processing Agreement.
| Provider | Legal entity | Purpose | Data processed | Location | DPA |
|---|---|---|---|---|---|
| Supabase | Supabase, Inc. (To confirm) | Database, authentication, file storage | Account data, usage/log data, encrypted connection metadata, migration data | United States (West US — Oregon) | To confirm |
| Vercel | Vercel Inc. (To confirm) | Application hosting and delivery | Request/usage logs, IP address | United States (Washington, D.C.) | To confirm |
| Anthropic | Anthropic, PBC (To confirm) | AI features — model processing | Content submitted to AI features (data minimised; not used for model training) | United States | To confirm |
| AWS Bedrock | Amazon Web Services, Inc. (To confirm) | AI features — private / enterprise tier | Content submitted to AI features (private tier) | United States | To confirm |
| Stripe | Stripe, Inc. (To confirm) | Payment processing and subscription billing | Billing contact, card metadata (no full card numbers), transaction history | United States | To confirm |
| Resend | Resend (Plus Five Five, Inc.) (To confirm) | Transactional email delivery | Recipient email address, message content | United States | To confirm |
| Squarespace | Squarespace, Inc. (To confirm) | Domain registration and DNS | DNS queries (no account data) | United States | To confirm |
| Google (Google Analytics 4) | Google LLC (To confirm) | Website traffic analytics — loaded only after a visitor accepts analytics cookies | Truncated IP address, device/browser info, pages viewed, cookie identifiers (_ga) | United States | To confirm (Google Ads Data Processing Terms) |
Analytics
Google Analytics is not loaded until a visitor accepts analytics cookies on our cookie banner. If a visitor rejects, or has not yet chosen, no data is sent to Google. Advertising features and data sharing for Google’s own advertising are disabled. See our Cookie Policy for details.
Changes to this list
We will update this page at least 30 days before a new subprocessor begins processing personal data. To receive email notice of changes, email admin@brocktransform.comwith the subject "Subscribe: subprocessor updates".