Sub-processors.

The third-party services that process customer data on behalf of Layerstack. Updated whenever this list changes — subscribe to trust@layerstack.tech to receive 30-day advance notice of additions.

Sub-processorPurposeRegionData processed

SupabaseUser auth, session storage, account dataEU + USEmail, hashed password, session tokensPrivacy →

VercelApplication hosting, edge runtime, CDNGlobal edgeRequest metadata, IP (transit only)Privacy →

GroqLLM inference (intent parsing for Magic Console)EU + US (region-pinned per request origin)User-submitted prompt text. No retention. No training.Privacy →

Upstash RedisRate limiting (HMAC-hashed IP keys only)EU + USHashed IP address, request counterPrivacy →

GoogleOAuth sign-in (when user opts to use Google)GlobalEmail, profile, Google account ID (per user consent)Privacy →

SyncNodeRPC infrastructure, validator nodes, indexersEU (Frankfurt, Amsterdam, London) + US (NY)JSON-RPC calls, no PIIPrivacy →

Last updated: 2026-05-12