Legal
Subprocessors
Cited engages the following service providers as subprocessors to operate, secure, bill, and support the Service. This list includes only providers actually used by Cited in the ordinary course of providing the product. Optional providers are used only when a customer enables the related feature. Learn Domains is not a subprocessor unless a customer explicitly starts a handoff.
Cited may update this list as providers change. Material updates will be reflected on this page. Engagement of a subprocessor does not expand Cited’s warranties or create a direct contractual relationship between you and that provider.
- Vercel
- Application hosting and edge delivery
- Request metadata, application logs, deployment configuration
- United States and Vercel edge regions
- Required
- Supabase
- Database and server-side storage for workspace data
- Workspace configuration, monitoring evidence, notification preferences, billing projection fields
- Configured Supabase project region
- Required
- Clerk
- Authentication and user session management
- Account identifiers, email, authentication metadata
- United States and Clerk-operated regions
- Required
- Stripe
- Subscription billing and payment processing
- Customer and subscription references, invoices, payment method data handled by Stripe
- United States and Stripe-operated regions
- Required
- Resend
- Transactional email delivery
- Recipient email, alert and digest content, delivery metadata
- United States and Resend-operated regions
- Required
- DataForSEO
- Monitoring data provider for configured AI surfaces (ChatGPT, Gemini, Perplexity, Claude, Google AI Overviews, Google AI Mode)
- Configured prompts, locations, surface identifiers, and returned monitoring payloads
- Provider-operated regions
- Required
- Slack
- Optional customer-configured workspace notifications
- Alert payloads sent to a customer-provided Slack incoming webhook
- Customer Slack workspace region
- Optional
- Vercel Analytics
- Privacy-conscious web analytics for product and marketing pages
- Aggregated page-view and performance signals without prompt, note, or evidence content
- United States and Vercel edge regions
- Optional
- DataFast
- Privacy-conscious product analytics, conversion goals, funnels, and Stripe revenue attribution
- Page views, referrers, device signals, custom conversion goals, and payment attribution metadata without prompt, note, or evidence content
- United States and provider regions
- Optional
| Provider | Purpose | Data categories | Location | Required |
|---|---|---|---|---|
| Vercel | Application hosting and edge delivery | Request metadata, application logs, deployment configuration | United States and Vercel edge regions | Required |
| Supabase | Database and server-side storage for workspace data | Workspace configuration, monitoring evidence, notification preferences, billing projection fields | Configured Supabase project region | Required |
| Clerk | Authentication and user session management | Account identifiers, email, authentication metadata | United States and Clerk-operated regions | Required |
| Stripe | Subscription billing and payment processing | Customer and subscription references, invoices, payment method data handled by Stripe | United States and Stripe-operated regions | Required |
| Resend | Transactional email delivery | Recipient email, alert and digest content, delivery metadata | United States and Resend-operated regions | Required |
| DataForSEO | Monitoring data provider for configured AI surfaces (ChatGPT, Gemini, Perplexity, Claude, Google AI Overviews, Google AI Mode) | Configured prompts, locations, surface identifiers, and returned monitoring payloads | Provider-operated regions | Required |
| Slack | Optional customer-configured workspace notifications | Alert payloads sent to a customer-provided Slack incoming webhook | Customer Slack workspace region | Optional |
| Vercel Analytics | Privacy-conscious web analytics for product and marketing pages | Aggregated page-view and performance signals without prompt, note, or evidence content | United States and Vercel edge regions | Optional |
| DataFast | Privacy-conscious product analytics, conversion goals, funnels, and Stripe revenue attribution | Page views, referrers, device signals, custom conversion goals, and payment attribution metadata without prompt, note, or evidence content | United States and provider regions | Optional |
Customers can contact hello@cited.cc with questions about subprocessors. Related: Privacy · DPA request · Security.