Last updated: 23 May 2026
Subprocessors
A subprocessor is a third-party service that may process customer data on Korrali's behalf. We use the smallest set of subprocessors needed to operate the service. This page is the canonical list and is updated whenever it changes.
| Subprocessor | Purpose | Data category | Region |
|---|---|---|---|
| Amazon Web Services | Application hosting, PostgreSQL database, object storage, backups | All customer data | United States (us-east-1) |
| Anthropic | Large language model API for answer generation (Claude) | Knowledge base excerpts + questionnaire text, sent at request time only | United States |
| OpenAI | Fallback large language model API + text embeddings | Knowledge base excerpts + questionnaire text, sent at request time only | United States |
| Paddle | Merchant of record — billing, tax collection, payment processing | Billing email, company name, payment method (handled by Paddle directly) | United Kingdom / United States |
| Resend | Transactional email delivery (magic-link login, receipts) | Email addresses of account holders | United States |
| PostHog | Product analytics, error tracking | Pseudonymous usage events, error logs, approximate location | United States / European Union (cloud region) |
| Google (OAuth) | Sign-in with Google option (not required) | Email, name, profile picture URL — only if user chooses Google sign-in | United States |
| Loops | Waitlist + marketing email (pre-launch) | Email addresses of waitlist signups | United States |
| Calendly | Booking founder discovery calls | Email + name of caller, only if call is booked | United States |
Notifications of changes
When we add a new subprocessor or replace one that processes customer-uploaded data (KB, questionnaires, answers), we will notify active customers by email at least 14 days in advance. Operational subprocessors (e.g., analytics, billing) may be updated with shorter notice.
Contact
Questions about subprocessors: privacy@korrali.com.