Loading...
Loading...
The third-party providers we use to run the hosted service — who they are, what they do, and where your data lives. This is the same list disclosed in our Data Processing Agreement (§4).
Last updated: July 8, 2026
| Provider | Purpose | Location |
|---|---|---|
| Vercel Inc. | Application hosting, serverless compute, edge network / TLS termination | United States (primary compute region: US East; global edge network for static assets) |
| Supabase Inc. | Managed PostgreSQL — customer accounts, decision records, and audit data at rest | United States (AWS us-east-1, N. Virginia) |
| Upstash Inc. | Managed Redis — rate limiting and entitlement caching | United States |
| Stripe Inc. | Payment processing and billing | United States |
| PostHog Inc. | Product analytics | United States (PostHog US Cloud) |
| Functional Software Inc. (Sentry) | Error monitoring | United States |
All hosted infrastructure runs in the United States today. Hosted EU residency is on the roadmap and discussed per contract; strict residency or air-gap requirements are met today by self-hosting the engine on your own infrastructure.
OmegaEngine is BYOK-only: we never send your decision data to LLM providers. You call your own provider (OpenAI, Anthropic, Google, Mistral, etc.) directly with your own API key — so that provider is your subprocessor, under your agreement with them, not ours.
Per our DPA, customers are notified of subprocessor changes with 30 days notice before a new subprocessor processes personal data. To receive change notices by email, write to privacy@omegaengine.ai.