Providers and subprocessors
Last updated: 27/08/2026
This page identifies providers that may process center-controlled personal data on Clasbi's behalf. In that context, they act as subprocessors. Third-Party Services selected directly by the center are governed by their own terms and are not listed here unless they also process personal data on Clasbi's behalf.
Current subprocessors
The purpose and location details below are summaries. Each provider link contains its applicable processing terms and safeguards.
Vercel and Vercel Blob
Purpose: service hosting, server execution, delivery, technical logs, and file storage. Location: production deployment execution is configured in the European Union. Some network, support, storage, and subprocessor operations may involve processing in the United States or other countries under Vercel's applicable safeguards.
Neon
Purpose: managed PostgreSQL database, backups, and restore operations. Location: primary data hosting in Frankfurt, Germany; limited support processing may occur elsewhere under Neon's contractual safeguards.
PostHog
Purpose: product analytics and error diagnosis through limited events that may include user and center identifiers, product actions, and related operational data. Location: PostHog EU Cloud, with primary hosting in Frankfurt, Germany, under the current configuration; PostHog and its subprocessors are subject to the applicable safeguards.
Clerk
Purpose: authentication, session management, account security, and linked access data. Location: the United States and other locations used by Clerk's subprocessors under its data processing agreement.
Expo
Purpose: mobile update infrastructure and push-notification delivery support. Location: the United States and other service locations used under Expo's applicable terms.
Firebase Cloud Messaging
Purpose: delivery of Android push notifications. Location: Google's global service infrastructure under the Firebase Data Processing and Security Terms.
Google Workspace and Gmail
Purpose: support and service email when a message contains personal data controlled by a center. Location: Google's global service infrastructure under the Google Workspace data processing terms.
Changes to this list
Clasbi will publish the updated list before a new or replacement subprocessor materially affects center data. Centers may raise a reasonable data-protection objection through support.
Contact
For questions about subprocessors, email support@clasbi.com.