Sub-processors
Rekomi uses third-party sub-processors to provide the platform. The full, dated list, with the purpose and personal data shared for each, is maintained at /legal/subprocessors. We give customers advance notice before adding or replacing a sub-processor that processes personal data.
The current sub-processors include Clerk (authentication), Stripe (billing and payouts), Resend (email), Cloudflare (DNS, CDN, edge), DigitalOcean (hosting and private file storage), managed PostgreSQL and Redis, Sentry (error monitoring), PostHog and Google Analytics (opt-in analytics), Intercom (opt-in support chat), Anthropic (opt-in AI), Paddle (conversion tracking, rolling out), Braintree (conversion tracking, rolling out), and PayPal (payout rail, rolling out). See the sub-processor list for details.
Data residency
Default region: United States. Sub-processors may operate globally; we route sensitive data through US or EU edge nodes only.
GDPR posture
Rekomi is GDPR aware. We process customer data as a data processor under our Terms of Service. Data subject requests (access, deletion, portability) can be submitted via support@rekomi.com and are resolved within 30 days.
CCPA posture
California consumers can request access, deletion, and opt-out of data sale (which we do not do). Get in touch with us to submit a request.
Data Processing Addendum (DPA)
Our standard DPA template is available for download at /legal/dpa. For enterprise variants or custom terms, get in touch with us.
Security disclosures
For vulnerability reporting, see our security disclosure page.