This page lists the third-party subprocessors Pandal engages to process Customer Personal Data in connection with providing the Services. Per our Data Processing Addendum, Pandal provides at least 15 days’ notice before adding or replacing a subprocessor by updating this page.
To subscribe to notifications of changes, email info@pandal.ai with the subject “Subscribe: Subprocessor updates.”
Infrastructure and hosting
| Subprocessor | Location | Processing activity |
|---|
| Neon | United States | Managed PostgreSQL hosting; stores all canonical customer and operational data |
| Fly.io | United States | Application hosting and compute for the Pandal API and background workers |
| Cloudflare R2 | Global | Encrypted off-site object storage for database backups |
| Supabase | United States | Managed PostgreSQL for the marketing website waitlist form; stores prospect contact submissions only (no operational customer data) |
Payments
| Subprocessor | Location | Processing activity |
|---|
| Stripe | United States | Payment processing; handles billing and subscription management |
Customer relationship management
| Subprocessor | Location | Processing activity |
|---|
| Attio | United States | Read-only CRM identity matching; receives a tenant or company name to look up and store a CRM record identifier. No operational customer data is exported to Attio |
Email delivery
| Subprocessor | Location | Processing activity |
|---|
| Resend | United States | Transactional email delivery (authentication, account notifications) |
Observability and error monitoring
| Subprocessor | Location | Processing activity |
|---|
| Sentry | United States | Error monitoring and performance tracing; configured to scrub personal information from reports |
| PostHog | United States | Product analytics for the marketing site and application; IP addresses are anonymized |
AI model inference
| Subprocessor | Location | Processing activity |
|---|
| Anthropic | United States | Large language model inference for the Pandal AI assistant; inputs may include aggregated and anonymized summaries of customer data |
This list reflects Pandal’s subprocessors as of the last-updated date above. Pandal will update this page and provide notice before engaging additional subprocessors or replacing existing ones, as described in Section 4 of the DPA. Prior versions of this page are available at pandal.ai/legal/archive.
Questions? Contact info@pandal.ai.