← Back to home
Subprocessors
Last updated May 27, 2026
4granted uses the third-party services below to operate the platform. Each subprocessor is bound by a data processing agreement and is only sent the minimum data needed for its purpose.
| Vendor | Purpose | Data processed | Location |
|---|---|---|---|
| Supabase | Database, authentication, file storage | Account data, organization data, uploaded documents | United States (AWS) |
| Cloudflare | Application hosting, CDN, DDoS protection | Request metadata, IP addresses | Global edge network |
| Stripe | Payment processing & subscription billing | Billing contact, payment method (tokenized) | United States |
| Resend | Transactional email delivery | Email address, message content | United States |
| Google (Gemini API) | AI grant matching, summarization, extraction | Grant text, prompts (no training on customer data) | United States |
| OpenAI | AI assistant responses & document analysis | Prompts, document excerpts (no training on customer data) | United States |
| Google Analytics | Website usage analytics | Anonymized IP, page views, device info | United States |
| PostHog | Product analytics | Event data, anonymized user identifiers | United States |
| Intuit (QuickBooks Online) | Optional accounting integration — only when you connect it | Accounting data you authorize | United States |
| Google Drive | Optional document import — only when you connect it | Files you select for import | United States |
Notice of changes
We update this list when subprocessors are added or removed. For a Data Processing Agreement (DPA) or to subscribe to subprocessor change notifications, email team@4granted.app.