SafePrompt uses the following third parties to process customer data:
Purpose: Cloud infrastructure, data storage, compute
Data Processed: All customer data
Location: US (Virginia primary), with EU/Asia options available
Privacy: Google DPA
Purpose: Authentication, real-time database
Data Processed: User credentials, session tokens
Location: US (multi-region)
Privacy: Firebase DPA
Purpose: Database storage
Data Processed: Audit logs, policies, user data
Location: AWS (US, EU options available)
Privacy: MongoDB DPA
Purpose: Payment processing
Data Processed: Payment information (PCI-DSS compliant)
Location: US (multi-region)
Privacy: Stripe Privacy
Purpose: Frontend hosting
Data Processed: Application code, session data
Location: US (global CDN)
Privacy: Vercel DPA
SafePrompt will notify customers of any new sub-processor additions with 30 days advance notice. You may object to new sub-processors within this window.
Last Updated: May 31, 2026