Sub-Processors

Last updated: September 4, 2026

The following third-party service providers process personal data on behalf of Foundry01 LLC in connection with the TimeTracer service. Each is engaged under a Data Processing Agreement governing processor obligations, confidentiality, security, sub-processing, deletion on termination, and — where applicable — international-transfer safeguards. This list is derived from our company-wide vendor register; we will update this page and provide 30 days' advance notice before adding or replacing a material sub-processor.

ProviderPurposeData processed
SupabaseDatabase, authentication, file storageAccount data, time entries, uploaded report templates, authentication credentials
VercelApplication hostingAll data in transit
StripePayment processing, subscription managementBilling identifiers, subscription status (no card numbers)
OpenAIVoice transcription, time-entry parsing, report template analysis, report generation, summary translationAudio (transient, not retained by OpenAI or us); transcript text; timesheet summaries; names, teams and work roles spoken in a recording; and the full contents of report template documents you upload, including any letterhead, address or phone number printed on them. In an organization, a member's summary is sent for translation when another member views it in a different language. Not used to train OpenAI models.
ResendTransactional email deliveryEmail addresses, email content (invitations, sign-in links, notifications)
Backblaze B2Immutable audit-log archive; backup of stored filesPseudonymized audit/consent records (2-year WORM archive); a backup copy of generated reports and uploaded report templates
SentryError monitoringError metadata (personal data scrubbed before transmission)
UpstashRate limitingPseudonymous rate-limit counters (no customer content)

For questions about our sub-processors or to request our Data Processing Agreement, contact admin@foundry01.com.