Legal
Subprocessors
Effective date: June 29, 2026. Draft for attorney review.
This page lists only vendors that are visible in the current application implementation or checkout flow. DiliPilot should execute vendor DPAs, confirm locations and transfer terms, and update this table before processing material customer datasets at scale.
| Subprocessor | Purpose | Data categories | Processing location | Transfer mechanism |
|---|---|---|---|---|
| Supabase | Authentication, database, and private storage used by the application. | Account identifiers, workspace records, uploaded documents, logs, and metadata. | Not publicly asserted. | To be confirmed by vendor agreement. |
| Stripe | Checkout, billing, invoices, and payment processing when a customer starts paid checkout. | Billing contact, subscription, invoice, tax, payment status, and Stripe-hosted payment details. | Not publicly asserted. | Stripe terms and any applicable DPA or independent-controller terms. |
AI/model providers, analytics providers, support tools, and infrastructure providers must not be added to this public list until DiliPilot verifies that they receive or can access Customer Data and confirms the applicable contractual terms. To ask about subprocessors, contact privacy@dilipilot.com.