Heartland AI Solutions, LLC (doing business as Daymarked) uses the service providers below to run Daymarked. Each one processes personal information only to provide its service to us, under a written agreement. The "Client data" column shows whether a provider handles information our customers enter about their clients, which we process on their behalf under our Data Processing Addendum.
We email every customer at least 30 days before a new sub-processor starts handling their clients' information. Questions about this list go to privacy@daymarked.co.
Sub-processors
| Provider | What it does | Client data | Location | Transfer safeguard |
|---|---|---|---|---|
| Supabase (Supabase Pte. Ltd.) | Database, sign-in, and file storage | Yes | United States (AWS, northern Virginia) | EU Standard Contractual Clauses, with UK and Swiss addenda |
| Vercel (Vercel Inc.) | Hosting and server functions; cookie-free page analytics | Yes | United States | EU-US Data Privacy Framework, UK Extension, and Swiss-US framework; Standard Contractual Clauses |
| PostHog (PostHog Inc) | Product analytics and session recordings of the app | Only anonymous visit counts from pages clients use | United States | EU-US Data Privacy Framework, UK Extension, and Swiss-US framework; Standard Contractual Clauses |
| Sentry (Functional Software, Inc.) | Error monitoring | Yes, when a failed request contained client details | United States | EU-US Data Privacy Framework, UK Extension, and Swiss-US framework; Standard Contractual Clauses |
| Resend (Plus Five Five, Inc.) | Email delivery, including questionnaires and sign-in codes sent to clients | Yes | United States | EU-US Data Privacy Framework and UK Extension; Standard Contractual Clauses, which also cover Swiss transfers |
| OpenRouter (OpenRouter, Inc.) | Routes questionnaire imports to an AI model | Yes | United States | EU Standard Contractual Clauses, with UK and Swiss clauses |
| Microsoft Azure, through OpenRouter | Runs the AI model for questionnaire imports under a zero data retention policy (OpenRouter's sub-processor) | Yes | Not disclosed by OpenRouter | Microsoft's EU-US Data Privacy Framework, UK Extension, and Swiss-US certification |
| n8n (n8n GmbH, Germany) | Onboarding and account emails to Daymarked customers | No | European Union | Not needed; data stays in the EU |
Independent controllers
These providers use the information they receive under their own terms, as controllers, rather than on our instructions.
| Provider | What it does | Client data | Terms |
|---|---|---|---|
| Stripe (Stripe, LLC) | Payment processing | No | Stripe's own privacy policy and data processing terms |
| Google Maps Platform and Sign in with Google (Google LLC) | Address lookup, travel times, and signing in with Google | Yes, addresses typed into the app | Google's Controller-Controller Data Protection Terms |
OpenRouter doesn't store the content of requests, apart from a small sample it categorizes anonymously and never links to our account. More about how we handle personal information is in our Privacy Policy.