Subprocessors
Last updated: 2026-05-18
CoreDeck uses the following third-party service providers (“subprocessors”) to operate the Service. Before engaging new subprocessors we conduct a privacy and security review. Material changes are announced at least 30 days in advance via email to account admins.
| Name | Purpose | Location | DPA / Privacy |
|---|---|---|---|
| Google Cloud Platform | Cloud infrastructure (Cloud Run, GCS, MongoDB hosting) | us-central1, europe-west1 | DPA ↗ |
| Anthropic | Claude LLM API — optional per-user model selection | United States | DPA ↗ |
| OpenAI | GPT LLM API — optional per-user model selection | United States | DPA ↗ |
| Google AI (Gemini) | Gemini LLM API — optional per-user model selection | United States | DPA ↗ |
| Google OAuth | Single sign-on (user-initiated) | Global | DPA ↗ |
| Paddle (Paddle.com Market Ltd, UK; Paddle.com Inc., USA) | Merchant of Record — subscription billing, payment processing, tax collection and remittance, invoicing, refunds and chargebacks | Global (EU + USA data centres) | DPA ↗ |
| Serper.dev | Web search grounding (when user invokes search) | United States | DPA ↗ |
Notifications
To receive advance notice of subprocessor changes, email [email protected] to subscribe.