Subprocessor List
CHARTFI SUBPROCESSOR LIST
Effective Date: September 1, 2026
About this list
To operate ChartFI, Good Trajectory LLC uses a small number of trusted third-party service providers ("subprocessors") that may process personal information on our behalf. This list is provided for transparency and supplements our Privacy Policy. Each provider is engaged under terms requiring it to protect information consistent with applicable law, and each receives only the information reasonably necessary to perform its function.
We host and process personal information in the United States. We may update this list as our providers change; the "Effective Date" above reflects the most recent update.
Current subprocessors
| Provider | Function | Categories of data processed | Processing location |
|---|---|---|---|
| Supabase | Database hosting and user authentication | Account information, authentication credentials, financial planning data | United States |
| Vercel | Application hosting / front-end delivery | Technical and usage data, IP address | United States |
| Render | Application hosting / back-end services | Technical and usage data, application data in transit | United States |
| Cloudflare | Content delivery, DNS, and network security; encrypted off-site storage of database backups | IP address, request metadata, security data; and, within database backups, account information and financial planning data | United States |
| Anthropic (Anthropic API) | AI features (explanations and summaries) | AI prompts and responses you submit to AI features | United States |
| Stripe | Payment processing | Billing details, transaction data, payment method metadata | United States |
| Resend | Transactional and marketing email delivery | Name, email address, message content | United States |
| Sentry | Error monitoring and crash reporting | Diagnostic and error data (may incidentally include limited personal data) | United States |
| BetterStack | Logging and uptime monitoring | Log and diagnostic data (may incidentally include limited personal data) | United States |
Development infrastructure (not a data subprocessor): GitHub is used to host source code and manage development. It is not used to store or process end-user personal information in the ordinary course.
Notes and commitments
- AI provider: Under Anthropic's commercial terms, the inputs and outputs sent through the Anthropic API are not used to train Anthropic's models.
- Payment data: We do not store complete payment card numbers on our own systems; card data is handled by Stripe.
- Monitoring/logging: Because error-monitoring and logging tools can incidentally capture personal information contained in requests or error payloads, we take reasonable steps to limit and, where practicable, scrub personal information from these systems.
- Changes: If we add or replace a subprocessor that processes personal information, we will update this list. Where required by applicable law or contract, we will provide advance notice.
Contact
Questions about this list may be directed to privacy@chartfi.com.