This page lists the third-party subprocessors Pandal engages to process Customer Personal Data in connection with providing the Services. Per our Data Processing Addendum, Pandal provides at least 15 days’ notice before adding or replacing a subprocessor by updating this page.
To subscribe to notifications of changes, email info@pandal.ai with the subject “Subscribe: Subprocessor updates.”
Infrastructure and hosting
| Subprocessor | Location | Processing activity |
|---|
| Supabase / PostgreSQL | United States | Managed database hosting; stores canonical customer and operational data |
Authentication
| Subprocessor | Location | Processing activity |
|---|
| Supabase Auth | United States | User authentication and OAuth flow management |
Payments
| Subprocessor | Location | Processing activity |
|---|
| Stripe | United States | Payment processing; handles billing and subscription management |
Email delivery
| Subprocessor | Location | Processing activity |
|---|
| Resend | United States | Transactional email delivery (authentication, account notifications) |
Observability and error monitoring
| Subprocessor | Location | Processing activity |
|---|
| Sentry | United States | Error monitoring and performance tracing; configured to scrub personal information from reports |
| PostHog | United States | Product analytics for the marketing site and application; IP addresses are anonymized |
AI model inference
| Subprocessor | Location | Processing activity |
|---|
| Anthropic | United States | Large language model inference for the Pandal AI assistant; inputs may include aggregated and anonymized summaries of customer data |
This list reflects Pandal’s subprocessors as of the last-updated date above. Pandal will update this page and provide notice before engaging additional subprocessors or replacing existing ones, as described in Section 4 of the DPA. Prior versions of this page are available at pandal.ai/legal/archive.
Questions? Contact info@pandal.ai.