Sub-processors
Everyone who processes data on our behalf. This page is separate from the privacy statement because it changes more often than the rest of it does.
| Party | What they do | Location |
|---|---|---|
| Fly.io (Sprites) | Runs your Hand: the isolated Linux sandbox, its filesystem, its checkpoints and the URL your AI connects to. | United States, with regions worldwide. Placement is automatic; a region cannot currently be chosen. |
| Tigris | Object storage behind the sandbox filesystem. Fly.io names it as a sub-processor for Sprites. | United States |
| Stripe | Payments and subscriptions. Stripe receives the account name, email address and internal account identifier; card details go directly to Stripe and are never held by us. | United States and Ireland |
| Resend | Delivers essential account and trial-expiry emails. Resend receives the recipient email address, message content and delivery metadata. | United States |
| Google Sign-In, if you choose it. Google confirms who you are; we receive your email address and name. | United States and Ireland | |
| Nango Inc (optional BYOK) | Only when you enable Nango BYOK: stores provider authorizations in the Nango account you control and executes the explicitly allowlisted actions your Hand requests. | United States. Nango states that its DPA applies to cloud accounts and supports the EU-U.S. Data Privacy Framework. |
| Cloudflare | Serves this website and terminates TLS. | United States, with a global network |
Transfers outside the EEA
Several of these are established in the United States, and the region your Hand runs in is not something we can pin today. Transfers rest on the standard contractual clauses in each provider's data processing agreement.
We would rather write that plainly than imply a European guarantee we cannot give.
Not on this list
No analytics, no advertising network, no tracking pixels, no session recording. Web fonts are served from this site rather than from Google's font CDN, so loading a page does not tell Google that you did.
Changes
New sub-processors are added here before they start processing anything. A notification mechanism for changes is not built yet.