Last updated 29 August 2026
Subprocessors
Every third party that can reach customer data, what they do, and where. The list is short because the product carries no analytics, no advertising pixels, no session recording and no embedded third-party scripts of any kind.
Draft, pending legal review. This describes what Glass Box actually does, written from the code rather than from a template — which is the part a lawyer cannot do for you. Some of the wording is the market-standard answer, included so a review starts from a position rather than a gap. None of it has been read by a lawyer, and it is not legal advice.
Current subprocessors
| Provider | What it does | Data it can reach | Location |
|---|---|---|---|
| Render | Runs the application and serves it over TLS | All workspace data in transit and in memory | Ohio, United States |
| Neon | Stores the Postgres database and its backups | All workspace data at rest | AWS us-east-2 (Ohio) |
| Stripe | Takes subscription payments and hosts the checkout | Billing contact and card details, which never reach our servers. No workspace data | United States and Ireland |
| Resend | Sends password resets, verification and security notices | Name and email address only. Nothing anybody wrote in a workspace is ever put in an email — not a message, not a topic name, not a count | United States |
What is deliberately absent
No analytics provider. No advertising or conversion pixel. No session recording or replay. No customer-support chat widget. No content delivery network holding application data. No external font, script or stylesheet host — the content security policy forbids the browser from loading one, so this is enforced rather than merely intended.
No model provider. The rewriting that removes names and heat from a message runs on our own servers, on our own code. Nothing anybody writes is sent to a third party for processing, and nothing is used to train anything.
Changes
We will publish changes here and notify account administrators at least 30 days before a new subprocessor begins processing, so a customer can object. The objection process is in section 5 of the data processing addendum.