Security · Sub-processors
Sub-processors.
The third-party vendors The Color Tools uses to operate the service. We notify customers at least 30 days before adding new sub-processors. Subscribe at the bottom of the page to be notified.
| Vendor | Purpose | Region | DPA |
|---|---|---|---|
| Vercel | Application hosting + CDN | US, EU | DPA |
| Supabase | Database, auth, storage, realtime | US, EU (selectable) | DPA |
| Stripe | Payment processing | US, EU | DPA |
| Resend | Transactional email | US | DPA |
| PostHog | Product analytics + feature flags | US, EU (self-hosted optional) | DPA |
| Anthropic | AI palette generation, naming, brand-brief intake | US | DPA |
| OpenAI | Image-to-brand-system AI fallback | US | DPA |
| Cloudflare | DNS + DDoS protection | Global | DPA |
| Sentry | Error monitoring | US, EU | DPA |
For our enterprise DPA, see /dpa. For incident notifications, write to security@thecolortools.com.