Legal
Subprocessors
The third-party services that process customer data on our behalf. We notify organization administrators 30 days before adding a new entry.
The table below lists every service in the path of customer data. The list is current as of the last deployment of this page; the email path described above is the canonical announcement channel for changes. Inclusion here does not imply that a given vendor handles all categories of customer data — it implies that they handle the categories listed in their row.
Anthropic
United States
Purpose: AI model inference for BOM extraction.
Data categories: PDF page rasters submitted for extraction (standard commercial API terms; not used for model training).
Clerk
United States
Purpose: Authentication and organization membership.
Data categories: User profile (name, email), session metadata, organization membership.
Stripe
United States
Purpose: Subscription billing and payment processing.
Data categories: Customer + subscription identifiers, invoice history. Card numbers never reach PipeTakeoff.com servers.
Cloudflare R2
United States (US-East primary)
Purpose: Object storage for uploaded drawings and generated exports.
Data categories: Original isometric PDFs, generated xlsx/csv exports, organization logos.
Neon
United States (US-East primary)
Purpose: Managed Postgres database hosting.
Data categories: Organization data, projects, BOM rows, catalog entries, audit logs, user mirrors.
Vercel
United States (global edge)
Purpose: Hosting for the marketing site and signed-in web application.
Data categories: Request logs (IP, user agent, path). No application data persisted in Vercel infrastructure.
Fly.io
United States (US-East primary)
Purpose: Hosting for the api service.
Data categories: Request logs. No application data persisted in Fly infrastructure.
Trigger.dev
United States
Purpose: Background job runner for extraction and CSV import workloads.
Data categories: Job payloads (org/project/revision identifiers; signed URLs to R2 objects).
Sentry
United States
Purpose: Error and exception monitoring across web, api, and jobs.
Data categories: Stack traces, request identifiers, redacted error metadata. Customer PII is scrubbed before send.
Axiom
United States
Purpose: Log aggregation and retention.
Data categories: Structured application logs. Customer PII is scrubbed before send.
PostHog
United States
Purpose: Product analytics for feature usage and funnel measurement.
Data categories: Pageviews, feature events, session metadata keyed by user + organization identifier.
Resend
United States
Purpose: Transactional email delivery (invitations, payment-failure notices, extraction failures).
Data categories: Recipient email address, message subject + body, delivery status webhook callbacks.
Doppler
United States
Purpose: Secrets management for application configuration.
Data categories: No customer data. Service credentials and configuration only. Listed for completeness.
Notice of changes
When we add a new subprocessor, organization administrators receive an email 30 days before the new vendor is engaged. Existing customers who object during the notice window may terminate the affected subscription for cause; see the Terms of service for the termination procedure.
Contact
Questions about a specific vendor or our subprocessor controls? Email privacy@pipetakeoff.com.