Subprocessors
Who else touches the data.
Operating Signal requires a small number of third-party services. This page names each one, what it processes, and where — so a client can complete diligence without having to ask.
Effective July 20, 2026
Current subprocessors
Each provider is engaged under terms that restrict processing to the purpose below, require appropriate security measures, and prohibit use of the data for the provider’s own purposes.
| Provider | Function | Data processed | Location |
|---|---|---|---|
| Supabase | Managed PostgreSQL database, authentication, and file storage — the primary system of record for the platform. | Client and authorized-user account records, participant slot records (function label and pseudonymous slot identifier only), submission content, generated themes and reports, authentication and access logs. | United States |
| Vercel | Application hosting and edge network for wexlergray.com and app.wexlergray.com. | Request routing and delivery, IP address, request metadata, and operational logs. Application data is not stored at this layer. | United States |
| Resend | Transactional email delivery — sign-in links, escalation alerts, the weekly digest, and contact-form submissions. | Recipient email address and message content for the messages we send. Participants receive no email from Wexler Gray and appear nowhere in this data. | United States |
| Anthropic | AI-assisted drafting of Bearing interpretations from validated escalations. | Escalation titles and summaries, plus aggregated theme labels and their frequency counts. Participant free-text notes are not sent. There is no participant identity to send. | United States |
| Stripe | Subscription billing and payment processing for the public checkout. | Billing contact details and subscription records. Card details are collected and held by Stripe; Wexler Gray does not receive or store them. No program data is shared. | United States |
Integrated but not enabled
These are built into the platform and switched off. No data reaches them in their current state. They are listed because a diligence review will find the integrations in place, and because enabling any of them is a change we would rather disclose in advance than explain afterwards.
| Provider | Function | Data processed | Location |
|---|---|---|---|
| OpenAI | Text embeddings for grouping similar observations. Integrated but not switched on; the feature degrades to no operation when unconfigured. | Would receive observation text only. No participant identity exists to send. | United States |
| Sentry | Application error monitoring. Integrated but not switched on; no data is transmitted while it is unconfigured. | Would receive error and diagnostic data, including stack traces and request metadata. | United States |
| Cloudflare | Turnstile bot protection on the sign-in form. Client support is deployed; not currently enabled. | Would receive challenge-solving signals and IP address at sign-in. | Global edge network |
What no subprocessor receives
Participant identity. Not because it is withheld, but because it does not exist. Wexler Gray holds no participant name, email address, or account — only an organizational function and a pseudonymous slot identifier. There is nothing to pass on.
Free-text notes, to AI providers. The Bearing drafting flow sends escalation titles and summaries together with aggregated theme labels and counts. Optional participant free text is not included.
Program data, to the billing provider. Stripe receives billing information only. Signal, Beacon, and Bearing data is never shared with it.
Training data. Our AI provider agreements prohibit the use of data submitted through their contracted API services to train general-purpose models. Wexler Gray does not use participant submissions to train models of its own.
Changes to this list
We update this page when a provider is added or removed, or when the role of an existing provider changes, and revise the effective date above.
Where an engagement agreement provides for advance notice of subprocessor changes, we give that notice on the terms set out in the agreement. Clients who wish to be notified of changes, or who want the current list in writing for a diligence questionnaire, can request it through the contact form.
See also the Privacy Policy and the Security overview.