Legal
Sub-processors
Last modified: September 21, 2026
This page is the current list of Sub-processors referred to in Annex 3 of Pentane’s Data Processing Addendum.
Under Section 5.2 of the DPA, Pentane will give customers at least fifteen (15) days’ notice — by updating this page and notifying you through the Platform or by email — before authorizing a new Sub-processor to process Customer Personal Data. You may object on reasonable data-protection grounds within that period.
Current Sub-processors
| Sub-processor | Purpose | Location |
|---|---|---|
| Amazon Web Services, Inc. | Hosting, storage, and compute | United States |
| Supabase | Hosting, storage, and compute | United States |
| Vercel | Hosting, storage, and compute | United States |
| Plenum Labs LLC | Affiliate; advertising audience matching, suppression, and measurement for customers that purchase Ad Management Services | United States |
| Anthropic | AI-assisted analysis features; no training on Customer Personal Data | United States |
| OpenAI | AI-assisted analysis features; no training on Customer Personal Data | United States |
| Google (Gemini) | AI-assisted analysis features; no training on Customer Personal Data | United States |
| Klaviyo | Transactional email and alerts to Authorized Users | United States |
| Resend | Transactional email and alerts to Authorized Users | United States |
| Google (Gmail) | Transactional email and alerts to Authorized Users | United States |
| Intercom | Customer support | United States |
| Google Analytics | Platform usage analytics (Authorized User data only) | United States |
Not a Sub-processor
Stripe, Inc. processes payment data for Pentane as an independent controller and is not a Sub-processor of Customer Personal Data.
Questions
Email support@pentane.com.