Subprocessors
Last updated: February 2026
Zelio uses the following third-party service providers (subprocessors) to operate the platform. Each subprocessor is contractually bound to handle your data securely and in accordance with applicable data protection laws.
| Provider | Purpose | Data Types | Location |
|---|---|---|---|
| Supabase | Database, authentication, row-level security, secret vault | Account data, project data, secrets (encrypted) | US / EU |
| Cloudflare | CDN, Workers (compute), R2 (object storage), Secrets Store, WAF | Application code, build artifacts, platform secrets, traffic data | Global |
| Modal | Sandboxed execution for build, verification, and preview environments | Generated code, build outputs, preview sessions | US |
| Vercel | Deployment hosting for published user applications | Application bundles, deployment metadata, custom domains | Global |
| Stripe | Payment processing and subscription billing | Billing information, payment methods, subscription status | US / EU |
| PostHog | Product analytics and event tracking | Usage events, feature adoption metrics (anonymized) | EU |
| Sentry | Error monitoring and crash reporting | Error logs, stack traces, performance data | US |
Changes to Subprocessors
We will notify workspace owners via email at least 30 days before adding new subprocessors or making material changes to existing ones. If you object to a new subprocessor, you may terminate your subscription before the change takes effect.
Data Processing Agreement
Enterprise customers may request a Data Processing Agreement (DPA) that covers all subprocessors listed above. Contact us at privacy@zelio.ai for details.