schema theory

sub-processors

sub-processors

last updated 6 june 2026

These are the third parties that may process personal data on our behalf to provide the service. We keep data in the EU/EEA where feasible and use Standard Contractual Clauses for transfers outside it. See our privacy policy and DPA.

core infrastructure

Cloudflare
hosting, edge compute, security, storage — US (EU residency where feasible).
Fly.io
headless rendering — US company, EU region.
Stripe
payments — Stripe Payments Europe (Ireland).

communications & crm

Resend
transactional and update email — US.
Google Workspace
email and productivity — US/EU.
Cal.com
call scheduling — US (or EU self-host).
Attio
crm / lead management — US/UK.

analysis & ai (the reader)

Anthropic
analysis and synthesis — US.
OpenAI
embeddings — US.
Perplexity
ai-visibility queries — US.
Google
performance and search data (PSI/CrUX, Search Console, Analytics, Ads) — US/EU.

retainer integrations (only if connected)

For retainer clients we may also process data through the platforms a client connects, such as Meta, Klaviyo, and Shopify, strictly to provide the service.

changes

We update this page when we add or change a sub-processor. Questions: [email protected].