ModerateHQ - Subprocessors
Last updated: 7 July 2026
A subprocessor is a third party we engage to help provide the ModerateHQ Service, and which may process personal information in doing so. We use established providers, each operating under its own published terms and data-protection commitments.
This page lists our current subprocessors. We split them by whether they may handle Submitted Content (the content customers send for moderation, which can contain end-user personal information) or only account, billing, and infrastructure data.
Subprocessors that may process Submitted Content
| Subprocessor | Purpose | Data processed | Location |
|---|---|---|---|
| Anthropic, PBC | Generates moderation verdicts (the AI model the content is evaluated against). | Submitted Content (text) and policy context. | United States |
| Neon, Inc. (database) | Stores request/response records, including Submitted Content, for the retention period. | Submitted Content, moderation results, account and usage data. | United States (AWS, N. Virginia) |
| Railway Corp. (application hosting) | Runs the API services that receive and process Submitted Content. | Submitted Content in transit/processing; application logs. | United States (Virginia) |
Subprocessors that process account, billing, or infrastructure data only
| Subprocessor | Purpose | Data processed | Location |
|---|---|---|---|
| Vercel, Inc. | Hosts the website and customer dashboard; provides cookieless, aggregated site analytics. | Account session data; dashboard traffic; aggregated page-view statistics (no cookies, no cross-site tracking). Not Submitted Content. | United States |
| Okta, Inc. (Auth0) | Dashboard sign-in and identity. | Account holder email, name, and login identifiers. | United States |
| Stripe, Inc. | Payment processing and credit purchases. | Billing contact details and transaction data. We do not store full card numbers. | United States |
| Zoho Corporation (Zoho Mail) | Transactional email (account, billing, and security notices). | Account holder email address and the contents of those notices. Not Submitted Content. | Australia |
| Functional Software, Inc. (Sentry) | Error and log monitoring so we can find and fix faults. | Technical error and diagnostic data (error messages, stack traces, request metadata). Configured to exclude Submitted Content and personal details. | United States |
Changes to this list
We may add or replace subprocessors as the Service evolves. When we add a new subprocessor that may process Submitted Content, we will update this page and give at least 30 days' notice to active customers by email or dashboard notice before the new subprocessor begins processing Submitted Content. Enterprise customers under a Data Processing Addendum may object to a new subprocessor on reasonable data-protection grounds within the notice period; if we cannot resolve the objection, the customer may terminate the affected Service.
To receive subprocessor-change notices, keep your account email address current.