This page lists the technical sub-processors used by Freelance OS to deliver its services. Any change is notified to active accounts with a 30-day notice and a right of objection.
Hosting and infrastructure
Name
Purpose
Country
Safeguards
Supabase
PostgreSQL database, authentication, object storage
EU (Frankfurt)
Supabase DPA, RLS, AES-256 encryption at rest
Vercel
Frontend hosting, serverless functions, CDN
US
Vercel DPA + SCC, TLS 1.3
Payment and billing
Name
Purpose
Country
Safeguards
Stripe Payments Europe Ltd
Payment processing, subscriptions, billing
EU (Ireland) + US (group)
Stripe DPA, PCI-DSS level 1, SCC for US transfer
Stripe Connect
Payment onboarding for reseller workspaces
US
Stripe Connect DPA + SCC
Email and communication
Name
Purpose
Country
Safeguards
Resend
Transactional emails (auth, invoices, notifs)
US (group) / EU (option)
Resend DPA, SCC
Artificial intelligence
Calls to language models are routed through a technical gateway (Vercel AI Gateway) that forwards requests to the underlying provider, without retaining prompt content.
Name
Purpose
Country
Safeguards
Vercel AI Gateway
Routing gateway for language model calls
US
Vercel DPA + SCC, TLS 1.3, no prompt-content retention
Anthropic (Claude)
Studio text content generation
US
Anthropic DPA, API zero-data-retention, SCC
Google Gemini
Persona image generation, copy assistant
US
Google DPA, SCC
OpenAI
Ads video generation (optional)
US
OpenAI DPA, SCC, training opt-out
External data
Name
Purpose
Country
Safeguards
Apify
LinkedIn and ad library scraping (Meta, TikTok, Google)
US
Apify DPA, SCC
Fathom
Meeting recording and transcription (opt-in per call)
US
Fathom DPA, SCC, explicit participant consent
OAuth, multi-channel publishing and advertising platforms
The following OAuth providers receive data when you connect an account. They act as controllers for their own data, and as recipients of the data you publish or retrieve via their APIs.
Access tokens are stored encrypted (AES-256-GCM) and isolated per workspace. They are deleted immediately when you disconnect an integration.
Name
Purpose
Country
Google / YouTube
Video publishing, Analytics, Calendar
US
Google Ads
Campaign, ad group, metrics, audience and conversion management
US
TikTok
Studio video publishing
US/SG
TikTok Marketing API
Campaign, creative, audience, lead, pixel event and reporting management
US/SG
Instagram (Meta)
Publishing, DM, Conversions API
US
LinkedIn
Content publishing, profile enrichment
US
LinkedIn Advertising API
Campaign, audience and ad reporting management
US
Meta (Facebook)
Pixel, Conversions API, Ads Manager, Lead Ads
US
WhatsApp Business
Workspace messages
US
Analytics
Name
Purpose
Country
Safeguards
Google Analytics 4
Anonymized audience measurement (consent required)
US
Google DPA, SCC, IP truncation, anonymization on
Onward sub-processing
Before engaging a new sub-processor or replacing an existing one, Freelance OS notifies clients by email and updates this page. Clients may object to a substantial change within 14 days of notification and terminate without penalty.
Contact
For any sub-processor question: contact@freelance-os.fr.