> ## Documentation Index
> Fetch the complete documentation index at: https://docs.atlasent.io/llms.txt
> Use this file to discover all available pages before exploring further.

# Sub-processors

> Every third party that processes Customer Personal Data on AtlaSent's behalf, with locations and cross-border transfer mechanisms. 30-day change notification.

<Note>
  The canonical, contractually-binding sub-processor list is available
  on request from `legal@atlasent.io`. That document is incorporated by
  reference into the AtlaSent DPA and MSA. This page is the buyer-friendly
  summary; if the two disagree, the contractual list is authoritative.
</Note>

## What a sub-processor is

A sub-processor is a third party AtlaSent engages to process Customer
Personal Data in connection with the AtlaSent service. The categories of
Customer Personal Data, processing location, and cross-border transfer
mechanism for each sub-processor are documented at the canonical link
above.

## Change notification

We notify customers of any **addition** or **replacement** of a
sub-processor processing Customer Personal Data **at least 30 days**
before the change takes effect.

Customers who object to a new sub-processor in good faith may terminate
the affected service within the notice window without penalty for the
unused portion of any pre-paid fees, per DPA §11.

## Subscribe to change notifications

* **Email** `subprocessors@atlasent.io` with subject `subscribe` and the
  email address(es) that should receive notices.
* *(Planned)* `https://trust.atlasent.io/subprocessors/subscribe` self-serve form.

## Categories at a glance

| Category | Sub-processors involved (today) | Where to look |
| - | - | - |
| Core data plane (database, auth, storage) | Supabase | DPA Annex III row 1 |
| Transactional email | Resend | DPA Annex III row 2 |
| Subscription billing | Stripe | DPA Annex III row 3 |
| Optional AI assistance (opt-in only) | Anthropic | DPA Annex III row 4 |
| Console hosting | (See canonical list) | DPA Annex III row 5 |
| DNS / DDoS / WAF | (See canonical list) | DPA Annex III row 6 |
| Source code & CI (no Customer Personal Data) | GitHub | DPA Annex III row 7 |

For processing location, categories of Personal Data, and the transfer
mechanism (EU SCCs Module 2 / Module 3 / UK IDTA), see the canonical list.

## See also

* Canonical sub-processor list and Data Processing Agreement template:
  available on request from `legal@atlasent.io`
* Legal documents index


This documentation is built and hosted on [Mintlify](https://mintlify.com), a developer documentation platform.