Sub-processors
These are the third parties that may process data on ReadyForm's behalf. Raw video never leaves the EU and is never sent to US AI providers; only transcript text and thumbnails are, and AI b-roll providers are used only with explicit per-video opt-in.
| Sub-processor | Purpose | Data | Location |
|---|---|---|---|
| Supabase | Auth + database | Email, hashed password, account metadata | EU (Frankfurt) |
| Hetzner | Object storage + hosting | Video files, renders | EU (DE/FI) |
| Upstash | Rate limiting (Redis) | User/IP identifiers (no content) | EU |
| Sentry | Error monitoring | Error events (PII stripped) | EU |
| PostHog | Product analytics (opt-in) | Usage events | EU |
| Pexels | B-roll source | Search queries (no user data) | US (text only, no PII) |
| Anthropic | AI edit decisions | Transcript text + thumbnails (never raw video) | US (text only) |
| Higgsfield / Runway | AI b-roll (premium, opt-in per video) | Text prompts, generated assets | US (only on explicit opt-in) |
| Stripe | Billing (when enabled) | Email, payment method, billing address | EU (configurable) |
Last updated: 2026-06-06.