Sub-processors

Last updated: 1 October 2026

CardShare.ai uses the third-party service providers below ("sub-processors") to run cardshare.ai and our Slack app. Each one only processes data on our instructions and only as needed to provide its part of the service. See our privacy policy for what data we collect and why.

Current sub-processors

  • Vercel: Application hosting, serverless functions, and the AI Gateway that routes AI text generation requests. Location: United States.
  • Supabase: Database, authentication, and file storage for accounts, cards, contributions, and Slack installation data. Location: United States.
  • AI model providers (OpenAI, Anthropic, Google, xAI): Generate card headlines, messages, and cover images from the details you provide. We may use one or more of these, through Vercel's AI Gateway. Location: United States.
  • Resend: Sends account and card emails. Location: United States.
  • PostHog: Product analytics and AI request monitoring. Location: European Union.
  • Giphy: GIF search for card contributions. Location: United States.

How we choose sub-processors

We only use providers that protect data with encryption in transit and appropriate access controls, and that commit to handling data under their published data processing terms. We share the minimum data each provider needs to do its job.

Changes to this list

When we add or replace a sub-processor, we update this page and the date at the top. If you have questions or want to object to a change, email cardshareai@gmail.com.