Sub-processor List
Last updated: March 13, 2026
Resolve uses the following sub-processors to deliver the Service. This list is maintained in accordance with our Data Processing Agreement and GDPR Article 28 requirements.
We will notify customers of any changes to this list at least 30 days before engaging a new sub-processor. To subscribe to change notifications, email privacy@resolve.app.
Current Sub-processors
Supabase
EU West (Ireland)- Purpose
- Database hosting, file storage, vector embeddings
- Data Processed
- All application data: user profiles, decision content, team data, knowledge base documents, vector embeddings
- Privacy Policy
- https://supabase.com/privacy
Clerk
United States- Purpose
- Authentication and user identity management
- Data Processed
- User names, email addresses, profile pictures, authentication tokens, session data
- Privacy Policy
- https://clerk.com/legal/privacy
OpenAI
United States- Purpose
- AI-powered decision briefs and consensus summaries
- Data Processed
- Decision room content sent for AI processing (titles, context, stakeholder inputs). API data is not used for model training.
- Privacy Policy
- https://openai.com/policies/privacy-policy
Stripe
United States- Purpose
- Payment processing and subscription billing
- Data Processed
- Billing information, payment method details, transaction history, subscription status
- Privacy Policy
- https://stripe.com/privacy
Vercel
United States (Primary), Global CDN- Purpose
- Application hosting, edge network, serverless compute
- Data Processed
- HTTP request data, server logs, application telemetry
- Privacy Policy
- https://vercel.com/legal/privacy-policy
Sentry
United States- Purpose
- Error tracking and application monitoring
- Data Processed
- Error reports, stack traces, browser metadata, anonymized user context for debugging
- Privacy Policy
- https://sentry.io/privacy/
Resend
United States- Purpose
- Transactional email delivery
- Data Processed
- Email addresses, email content (decision notifications, invitations, deadline reminders)
- Privacy Policy
- https://resend.com/legal/privacy-policy
Integration-Specific Data Processing
When you connect optional third-party integrations, the following additional data processing occurs. These services act as independent controllers or joint controllers for data on their own platforms:
| Integration | Data Exchanged | Direction |
|---|---|---|
| Slack | Decision notifications, slash command interactions | Bidirectional |
| Microsoft Teams | Decision notifications to configured channels | Outbound |
| Jira | Decision outcomes synced to Jira issues | Outbound |
| Notion | Decision summaries exported to Notion pages | Outbound |
| Google Calendar | Decision deadline events | Outbound |
| Outlook Calendar | Decision deadline events | Outbound |
Changes to This List
This page is the authoritative source for our current sub-processor list. Any updates will be reflected here with an updated date. For enterprise customers with a signed DPA, we will provide direct notification of changes as specified in the DPA.