Subprocessors

The companies that process data for Typestream, what each one sees, and where. We give owners and admins 30 days’ notice before adding or replacing one.

Draft, pending legal review

This document is a draft written from how Typestream works today. It isn’t in force until our lawyers have reviewed it and we publish the final version. Last updated 25 September 2026.

Typestream’s subprocessors, what they do, what they see and where
Company	What for	What it sees	Where
Amazon Web Services	Hosting: the database, the article store, uploads, exports and backups, and the servers that run the API and background work.	Everything your organisation stores in Typestream.	New Zealand (Asia Pacific (New Zealand), ap-southeast-6)In New Zealand
Vercel	Serving the web app: static pages from its worldwide edge network, and pages drawn per request in Sydney.	Pages and requests as they pass through, and request logs. Nothing is stored there.	Worldwide edge; server rendering in Sydney, Australia
OpenRouter	Routing model calls to the model providers below.	Article text sent for judging, and the AI’s prompts, including your chat messages and subject profiles.	United States
TypeSafe	JEV, the model that judges each article: through OpenRouter, or directly if OpenRouter fails.	Article text and the questions asked of it.	Outside New Zealand; to be confirmed before launch
Google (Gemini, through OpenRouter)	The AI in chat: planning questions, researching subjects, writing answers.	The AI’s prompts, including your chat messages and subject profiles.	Outside New Zealand
Stripe	Subscriptions, credit packs, invoices and tax.	Your billing contact and history. Card details go to Stripe directly and never reach Typestream.	United States and other countries Stripe operates in
Resend	Sending email: verification, invitations, alerts, digests and receipts.	Recipients’ addresses and the emails’ content.	The Resend region nearest New Zealand; to be confirmed
Better Stack	Error reports, service logs, uptime checks and the status page.	Error reports, which carry request ids and never personal data, and service logs, which carry ids.	To be confirmed before launch
Microsoft	Signing in with Microsoft, if you choose to.	Your name, email address and Microsoft account id, which Microsoft sends when you sign in.	Microsoft’s regions for your account

What leaves New Zealand, and why, is explained in Security and data.