Subprocessors

Everpop uses the following subprocessors to operate the Service. All are bound by data processing agreements compliant with GDPR Article 28. International transfers to processors outside the EEA rely on Standard Contractual Clauses approved by the European Commission. This page mirrors Section 8 of our Privacy Policy.

Current subprocessors

• Vercel Inc. (USA) — application hosting
• Neon, Inc. (USA) — database hosting
• Cloudflare, Inc. (USA/EU) — CDN and object storage (R2)
• Stripe, Inc. (USA / Ireland) — payment processing (card data is sent to Stripe directly; we store only a customer_id reference)
• AI service providers — currently Anthropic, PBC (Claude, USA) and OpenAI (USA) — (audio transcription, moment selection, script and metadata writing, text-to-speech, automated content-safety screening, and viral title/description suggestions, used to generate clips and prompt-based shorts; the content sent to these providers includes your prompts, video transcripts and clip opening hooks, clip and source-video titles and descriptions, and clip thumbnail images, processed to deliver these features and to screen for prohibited content)
• Stock media providers (e.g. Pexels) — receive only generic visual search keywords derived from generated scripts, never your personal data
• Resend, Inc. (USA) — transactional email delivery

Changes & notice

We update this list when subprocessors change. We provide notice via the email address associated with your account at least 30 days before adding a new subprocessor that processes personal data. A current list of named subprocessors — including the specific AI service providers we use — is available to business customers and compliance teams on written request to privacy@everpop.app.

Data Processing Agreement

See our DPA summary for how we process customer data, or request the full Data Processing Agreement at the address above.