Sub-processors
Last updated 11 November 2026
Draft: this document describes how Kithwork actually works, but it hasn't yet been reviewed by a solicitor. It will be before Kithwork leaves beta.
These are the companies that process personal data on our behalf to run Kithwork. Each one has a written contract with us that includes confidentiality, security and data protection terms at least as protective as our data processing agreement. Where data leaves the UK, the safeguards described in our privacy policy apply.
| Provider | What for | Data | Based in |
|---|---|---|---|
| Vercel Inc. | Hosting and running the application | All data passes through it in transit; request logs including IP addresses | United States (company); regions set by our project configuration |
| Prisma Data, Inc. (Prisma Postgres) | Database | Accounts, workspace content other than files, logs | United States (company); database region set when it was created |
| Object storage provider (S3-compatible) | Storing uploaded files and logos | Files uploaded to workspaces | Set by our storage configuration |
| Resend, Inc. | Sending email | Recipient name and email address, email content | United States |
| Stripe Payments Europe, Ltd. and Stripe, Inc.Only when enabled | Payments and subscriptions | Billing contact, card and payment details (Kithwork never sees full card numbers) | Ireland and United States |
| Functional Software, Inc. (Sentry)Only when enabled | Error monitoring | Error details, browser and device type; we configure it not to collect names, emails, cookies or request bodies | United States |
Changes to this list
We'll email workspace owners at least 30 days before adding or replacing a sub-processor. If you object on reasonable data protection grounds, tell us at the contact address shown in the app within that period; if we can't resolve it, you can end your subscription and we'll refund any prepaid amount for the time after it ends.