Subprocessors
Effective: June 18, 2026
1. About this list
To run Knockt, we rely on a small set of trusted third-party providers (“subprocessors”) that may process limited data on our behalf. We keep this set deliberately small. This page accompanies our Privacy Policy.
2. Current subprocessors
| Provider | Purpose | Data processed | Location |
|---|---|---|---|
| Supabase | Database, authentication & file storage | Workspace data, account info | United States (AWS) |
| Vercel | Application hosting & edge delivery | Request metadata, logs | United States / global edge |
| Stripe | Payment processing | Billing & payment details | United States |
| Resend | Transactional email (verification, resets, receipts) | Email address, message content | United States |
3. How we vet them
Each provider maintains industry-standard security practices, and the infrastructure providers (Supabase, Vercel) maintain SOC 2 compliance. We enter into data processing agreements with our subprocessors where applicable, and we only share the minimum data needed for each to do its job.
4. Changes & notice
We may add or replace subprocessors as the service evolves. We will update this page accordingly, and for material changes we will notify customers in line with our Data Processing Addendum.
5. Data Processing Addendum & contact
A Data Processing Addendum (DPA) is available to customers on request. For a copy, or with any question about how data is processed, email support@knockt.app.