Last updated: January 26, 2026
Rulestack uses the following third-party service providers ("subprocessors") to help us provide and improve our services. Each subprocessor is contractually bound to handle your data securely and only for the purposes described below.
We will update this page when we add or remove subprocessors. Material changes will be communicated via email to account holders with at least 30 days notice.
| Service | Purpose | Location |
|---|---|---|
| Supabase | Database hosting, authentication, file storage | United States / European Union |
| Vercel | Web application hosting, edge functions, CDN | United States / European Union |
| OpenAI | AI integration (ChatGPT) - user-initiated connections only | United States |
| Anthropic | AI integration (Claude) - user-initiated connections only | United States |
OpenAI and Anthropic are listed as subprocessors because our Service allows you to connect your Rulestack account to their AI services via OAuth. Data is only sent to these providers when you:
If you do not connect to these services, no data is sent to them. You can revoke connections at any time from your Settings page.
If you have questions about our subprocessors or data processing practices, please contact us at privacy@rulestack.co.