Sub-processors
pulse Energy GmbH — Sitefire
Last updated: 6 October 2026
These companies process personal data on behalf of Sitefire customers. They are the sub-processors in Annex IV of our Data Processing Agreement (DPA).
We tell customers about a new or replaced sub-processor by email at least 30 days before it starts. Customers can object in that time. Questions: privacy@sitefire.ai.
| Sub-processor | Purpose | Location of processing | Transfer basis |
|---|---|---|---|
| Vercel Inc., USA | Hosting, serverless functions, workflows, AI Gateway, file storage, sandboxes for agent tasks | Functions in Frankfurt, Germany. File storage in Washington, D.C., USA, until it moves to Frankfurt. Other services: no fixed region | EU-U.S. Data Privacy Framework |
| Supabase Pte. Ltd., Singapore | Database, authentication, secret storage | Frankfurt, Germany | Standard Contractual Clauses |
| ClickHouse, Inc., USA | Analytics database | EU | EU-U.S. Data Privacy Framework |
| PostHog, Inc., USA | Product analytics, error tracking, AI traces (content deleted after 30 days) | Frankfurt, Germany | EU-U.S. Data Privacy Framework |
| Google Cloud EMEA Limited, Ireland | Google Cloud: service accounts for read-only access to a customer’s Google Analytics and Search Console. Google Workspace: email and documents, including support communications | Google Cloud: no customer data stored. Google Workspace: Google’s data centres | EU company |
| Google LLC, USA | Gemini language models; AI answers for tracked prompts | Global | EU-U.S. Data Privacy Framework |
| Anthropic Ireland, Limited, Ireland | Claude language models for AI features | USA and other countries | EU company; Standard Contractual Clauses for its onward transfers |
| OpenAI Ireland Ltd., Ireland | Language models for AI features; AI answers for tracked prompts | Global | EU company; Standard Contractual Clauses for its onward transfers |
| Perplexity AI, Inc., USA | Language models and web search; AI answers for tracked prompts | USA | EU-U.S. Data Privacy Framework |
| Sampark, Inc. (Composio), USA | Connections to tools that customers connect to agents, for example Slack, Microsoft Teams, Intercom, Notion | USA | Standard Contractual Clauses |
| Plus Five Five, Inc. (Resend), USA | Transactional emails | USA | EU-U.S. Data Privacy Framework |
| Slack Technologies Limited, Ireland | Internal communication and shared channels with customers, including support communications | Slack’s data centres | EU company |
| Cloudflare, Inc., USA | Bot protection on sign-in forms (Turnstile) | Global network | EU-U.S. Data Privacy Framework |