Trust

Subprocessors

The third parties that process customer data on Rendro's behalf. Rendro does not train AI models on your data. Under Anthropic's commercial terms, data sent through its API isn't used to train its models by default.

Last updated October 19, 2026

VendorPurposeCustomer data processedLocation
Supabase, Inc.Database, sign-in and file storageEverything stored in Rendro: accounts, uploaded documents, extracted text, search vectors, questionnaires and answersUnited States (AWS us-east-1)
Vercel Inc.Hosting the applicationData passing through the app; request logs (IP address, pages)United States (global edge network)
Anthropic, PBCDrafting answers (Claude API), reading questionnaire columns, and suggesting company profile facts from your websiteQuestions, your company profile and the most relevant passages from your workspace; a short preview of each questionnaire sheet; your website's home and /security page text when you use prefill from website; drafted answersUnited States
Voyage AISearch vectors (embeddings) for your documentsText passages from your documents and Answer Library, and your questionsUnited States
ResendAccount emails (sign-in, invitations, notifications)Recipient name and email address; notification text (never documents or answers)United States
Inngest, Inc.Running background jobs (reading documents, drafting answers)Job details only: workspace, document, questionnaire and question IDs, statuses and counts. Never document text or answersUnited States
Stripe, Inc.Payments, subscriptions and invoices for paid plansBilling contact name, email and address; payment details (Rendro never sees full card numbers). No documents or answersUnited States

Not in use yet

These will be added to the table above before they process any customer data:

  • PostHog (product analytics, configured never to capture document or answer text)
  • Sentry (error monitoring, with personal data and document text removed)

Email you send us

Email to rendro.net addresses (such as team@, security@ and privacy@) is forwarded by Forward Email to the founder's Google (Gmail) inbox. Messages sent from the in-app support form are emailed to the founder through Resend. Please don't email confidential documents: upload them to your workspace instead.

We give customers at least 30 days' notice before a new subprocessor starts processing their data. Subscribe to changes and we'll email you before this list changes.