These are the third-party providers that process Driftway data on our behalf, what each one does, and the kind of data it touches. We keep this list short on purpose, and we update this page when it changes.
Last updated: August 30, 2026
| Provider | What it does for Driftway | Data it may process | Processing region |
|---|---|---|---|
| Supabase | Database, authentication, and file storage. The system of record for your account. | Contacts, deals, notes, interactions, photos, and account details | United States (AWS, Oregon) |
| Vercel | Application hosting and compute. Serves the app and runs its scheduled jobs. | All app data in transit while requests are processed | United States |
| Anthropic | AI features: the Sprock assistant, match reasoning, briefs, card scanning, and summaries. Not used to train models. | Contact and deal text, card photos, and email content sent for processing | United States |
| OpenAI | Voice transcription only. Turns voice notes into text. Not used to train models. | Voice note audio | United States |
| Resend | Email delivery and ingestion: the morning digest, notifications, and emails you copy to Driftway. | Email addresses and message content | United States (North Virginia) |
| Cloudflare | Offsite backup storage, kept separate from our primary infrastructure, and Turnstile spam protection on the inquiry form. | Daily backup copies of the database and photos, encrypted at rest; browser verification signals when the form is submitted | Eastern North America (backups); global (Turnstile) |
| GitHub | Source code hosting and backup automation. | Backup data passes through its systems during nightly runs | United States |
| Google Workspace | Company email. Handles support and security correspondence. | Whatever you include when you write to us | United States |
Questions about any of these, or want the detail we share with firms during onboarding? Write to security@driftway.io.