Subprocessors

VendorCAD uses carefully selected subprocessors to help deliver VendorCAD. This page lists providers that may process Customer Content or personal data as described in our Privacy Policy and DPA.

Last updated: July 25, 2026. For notice of material changes, email contact@vendorcad.com with subject “Subprocessor notices.”

Depending on configuration and environment, we may use:

• Infrastructure hosting (e.g. Fly.io or equivalent cloud host) — application and API hosting; United States / provider regions.
• Object / file storage (cloud storage as configured) — export assets and uploads.
• Stripe — payment processing and billing metadata for paid plans.
• Transactional email (e.g. Resend) — system and notification email delivery.
• Cloudflare — CDN, bot protection (Turnstile), and related edge security.
• Sentry — application error monitoring and performance diagnostics.
• PostHog — product analytics (when analytics cookies are accepted).
• Microsoft Clarity — experience analytics (when analytics cookies are accepted).

If you connect third-party CAD or business systems (for example OnShape), those providers process data under your agreement with them and are not our subprocessors for that connection.

We may update this list as our stack evolves. Material additions will be posted here.