Sub-processors
Last updated 23 August 2026
This page lists the service providers Anookz relies on to run the Services. It forms part of our Data Processing Addendum. We give at least 30 days’ notice before a new sub-processor that can access personal data starts work. To be notified, email privacy@anookz.com and ask to be added to the list.
Providers we engage
We chose these, we are accountable for them, and they are what the notice commitment above covers. Each is engaged under terms requiring it to protect the data it handles and to process it only on our instructions.
| Provider | What it does | Region | Personal data |
|---|---|---|---|
| Vercel | Application hosting, file and image storage, web application firewall and bot protection | United States | Yes |
| Supabase | Primary database | United States | Yes |
| Auth0 (Okta) | Authentication, sign-in and passkeys | United States | Yes |
| Upstash | Cache, rate limiting and background job queue | United States | Limited — identifiers and job payloads |
| Stripe | Payments, point-of-sale terminals and subscriptions | United States | Yes |
| Anthropic | AI features | United States | Only what a prompt contains |
| OpenAI | AI features | United States | Only what a prompt contains |
| xAI | AI features, via the Vercel AI Gateway | United States | Only what a prompt contains |
| Resend | Transactional email delivery | United States | Yes — recipient name and address |
| AgentMail | Mailbox hosting for anookz.com addresses | United States | Yes — message contents |
| Sentry | Error and performance monitoring | United States | Limited — account identifiers and diagnostics |
Services you connect
These are different, and the difference matters. Data moves to them because you connected them and instructed it — under your own agreement with each provider. We cannot add or remove them for you, and we do not control what they do with what they hold. Disconnecting one at any time stops the flow.
| Provider | What it does | Region | Personal data |
|---|---|---|---|
| Lightspeed | Point of sale, sales, products and inventory | Per your Lightspeed account | Your customers, where present |
| Shopify | Online store, orders, products and inventory | Per your Shopify account | Your customers, where present |
| Reading supplier invoices and order mail from your inbox | United States | Message contents you authorise | |
| Bellwether | In-store foot-traffic counts | Per your Bellwether account | No — counts, not identities |
| Airtable | Location and reference data | United States | As you configure |
| Deputy | Rostering and staffing | Per your Deputy account | Your staff |
| GoSweetSpot | Freight quoting, booking and labels | New Zealand | Delivery addresses, at the time of booking |
AI providers
AI providers receive only what a given feature sends them at the moment you use it, and neither we nor they use your data to train models. Where a request is routed through the Vercel AI Gateway, the gateway is transport rather than a separate destination.
Questions
Email privacy@anookz.com.