subprocessorsUpdated October 14, 2026

Who else handles your data.

Harnace LLC uses these services to run Harnace. Each handles only what its part needs and is bound by data protection terms at least as protective as our Data Processing Addendum. None of them may use your data to train a model.

  • VercelVercel Inc.

    What it does
    Hosts the site and runs the application
    Data it handles
    Everything the service processes, in transit and while a request runs
    Where
    United States (Portland, Oregon)
    When
    Always
  • SupabaseSupabase Inc.

    What it does
    The database, file storage and daily backups
    Data it handles
    Customer Data at rest, including files a customer drops and the read ledger
    Where
    United States (Oregon)
    When
    Always
  • DescopeDescope Inc.

    What it does
    Sign-in and authorization when a customer's AI connects
    Data it handles
    A user's email address, the AI clients registered to connect and the access each user allowed
    Where
    United States
    When
    When a user connects an AI to Harnace
  • AnthropicAnthropic, PBC

    What it does
    The AI model Harnace uses inside the service: to read files a customer drops or emails in, sort mail sent to a company's inbox, answer questions asked in the console, in Slack or by voice, and match and map the records a company connects to build its outputs. The figures an AI reads through the endpoint are computed by Harnace's code, not by this model
    Data it handles
    The text of those files, messages and questions, and the records each task needs, which for a commission statement include what people are paid
    Where
    United States
    When
    Always
  • PostmarkActiveCampaign, LLC

    What it does
    Sends Harnace's email, including sign-in codes, and receives mail sent to a company's inbox
    Data it handles
    Email addresses, the messages sent and the mail received
    Where
    United States
    When
    Always
  • PostHogPostHog, Inc.

    What it does
    Product analytics and session recordings, on the public site and in the console
    Data it handles
    Page views, clicks and a user's email address. Every typed field and every piece of text on the page is masked before it leaves the browser
    Where
    United States
    When
    Always
  • SlackSlack Technologies, LLC

    What it does
    Messages to and from Harnace in a customer's workspace, and Harnace's own alerts to its founders about an account
    Data it handles
    In a customer's workspace: messages that mention Harnace, direct messages with it, files shared there and the names and emails of the workspace's people. In Harnace's own workspace: a company's name and a description of what failed or needs a founder
    Where
    United States
    When
    A customer's workspace only when the customer adds Harnace to it. Harnace's own alerts always
  • GitHubGitHub, Inc.

    What it does
    Holds Harnace's code, and the settings of a company Harnace set up by hand before sign-up opened
    Data it handles
    For such a company: its people's names, work emails and roles, its approvers and rules, and the names of its vendors and customers
    Where
    United States
    When
    Only for a company Harnace set up by hand
  • VapiVapi

    What it does
    Voice calls with Harnace, with Deepgram turning speech into text for Vapi
    Data it handles
    The call's audio while it runs, and its transcript, which Vapi keeps as well as Harnace
    Where
    United States
    When
    Only when someone talks to Harnace by voice

Not on this list

The AI your company connects, such as Claude or ChatGPT, and the company that runs it are your own recipients, under your agreement with them, not our subprocessors. The same is true of the systems you connect, such as your ledger or CRM, which Harnace reads on your instruction. To show a company's logo we look up its domain name with a public icon service, which receives the domain and nothing about a person.

Changes

We update this page and email each customer at least thirty days before a new subprocessor handles its data. A customer may object within that time, as the Data Processing Addendum section 7.4 says. Questions go to hello@harnace.com.

Talk to us

Used to reply, nothing else. Privacy