Sub-processors

Overview

DatumPilot (operated by IngeniVue Engineering Services Inc.) uses the sub-processors below to deliver the service. Each receives only the data it needs for its function. We rely on each provider’s standard data-processing terms; where applicable, transfers outside your country use safeguards such as the EU Standard Contractual Clauses and the UK Addendum. Processing regions reflect our current configuration and may be refined over time.

Current provider list

• Clerk — authentication, account identity, and session management. Region: United States. Data: account identifiers, email address, and authentication/session metadata. Standard data-processing terms apply.
• Stripe — checkout, subscriptions, invoices, and payment records. Region: United States. Data: billing and subscription identifiers and payment metadata (no full card numbers are stored by DatumPilot). Standard data-processing terms apply.
• OpenAI — AI model processing for GD&T interpretation, recommendation, and retained image-extraction compatibility (store=false where configured). Region: United States. Data: submitted GD&T text and, if image extraction is re-enabled, uploaded drawing image snippets processed to produce results. Standard data-processing terms apply.
• Supabase — application database, object storage, and owner-scoped records. Region: United States. Data: account identifiers, saved reports and derived GD&T text, and usage/entitlement records. Standard data-processing terms apply.
• Upstash — rate-limit and short-lived operational cache storage. Region: United States. Data: short-lived request metadata and rate-limit keys. Standard data-processing terms apply.
• Vercel — web application hosting, preview deployments, and edge runtime. Region: United States. Data: request metadata and operational logs. Standard data-processing terms apply.
• PostHog — optional product analytics, disabled unless analytics consent and owner approval are in place. Region: United States. Data: product-analytics events only (excludes raw callouts, prompts, reports, billing data, and secrets). Standard data-processing terms apply.
• Resend — transactional email delivery for account and billing notices. Region: United States. Data: recipient email address and transactional message content. Standard data-processing terms apply.

Changes and objections

We keep this page current as providers are added, removed, or materially changed. If you have a question or objection about a sub-processor, contact us at support@datumpilot.com.