Subprocessors
Last updated October 21, 2026
These companies process personal data on our behalf to provide the Accred apps. We give at least 30 days’ notice before adding one; organization owners are emailed when this list changes.
Current subprocessors
| Company | What they do for Accred | Location |
|---|---|---|
| Cloudflare, Inc. | Hosts Hub, the apps, and this site; network security; file storage for Assess evidence uploads. | Global network; storage in the United States |
| Supabase, Inc. | Databases, authentication, and file storage for the apps. | United States |
| Stripe, Inc. | Payment processing for paid plans, migration licenses, and the expanded assessment. | United States |
| Resend (Plus Five Five, Inc.) | Sends sign-in, invitation, and notification email. | United States |
| OpenRouter, Inc. | Routes requests for AI features (Consult assistant, Assess summaries) to model providers, currently Anthropic, OpenAI, Google, and DeepSeek models. Only the text needed for that request is sent. | United States |
Services you connect
Microsoft 365 (Microsoft Graph and Teams) and any AI provider accounts you link in Assess (Anthropic or OpenAI admin APIs) are services your organization chooses and controls. Accred reads from or sends to them only as you direct, using your consent or keys; they are not Accred subprocessors.