Subprocessors
Who helps us run Cellar
Last updated June 2026
We use a small, vetted set of infrastructure providers. They process data only to deliver the product, under data-protection agreements. We'll give notice before adding a new one.
Current subprocessors
| Provider | Purpose | Region |
|---|---|---|
| Supabase | Authentication and the encrypted database | EU / US |
| Cloudflare R2 | Encrypted document storage (ciphertext only) | EU / US |
| Amazon Web Services | In-region AI processing (Bedrock) and key management (KMS) | EU / US |
| Anthropic | The model that reads and organizes documents — zero-retention, no-training | EU / US |
| Stripe | Subscription billing | Global |
| Resend | Transactional email and sign-in links | Global |
| Vercel | Application hosting | Global |
What they never receive
Your account key is never shared with any subprocessor. Blob storage holds ciphertext only. The processing model receives plaintext transiently to do its work and retains nothing.