Subprocessors
Last updated: 2026-04-17
Newlight engages the following third-party service providers to help operate the Service. All Subprocessors are bound by written data-protection agreements equivalent to those in our Data Processing Addendum.
Customer notifications. We notify affected customers by email at least 30 days before adding a new Subprocessor. To subscribe to these notifications, email info@newlightai.com.
| Subprocessor | Purpose | Location | Privacy |
|---|---|---|---|
| Vercel Inc. | Application hosting, CDN, edge network | United States | View policy |
| Neon Inc. | Managed Postgres database (serverless) | United States | View policy |
| Upstash, Inc. | Rate-limit + cache (Redis as a service) | United States | View policy |
| Groq, Inc. | Default AI inference provider | United States | View policy |
| Anthropic, PBC | AI inference (optional, customer-selectable) | United States | View policy |
| OpenAI, L.L.C. | AI inference (optional, customer-selectable) | United States | View policy |
| Resend Inc. | Transactional email delivery | United States | View policy |
| Stripe, Inc. | Billing, subscription, and invoice processing | United States | View policy |
| Functional Software, Inc. (Sentry) | Error tracking and performance monitoring | United States | View policy |
| PostHog Inc. | Product analytics (if enabled) | United States | View policy |
Infrastructure subprocessors
Vercel and Neon store Controller data. Both provide SOC 2 Type II reports and contractual confidentiality obligations. Data is hosted in the United States by default. EU-only data residency is on the roadmap; Enterprise customers can request a single-region deployment.
Optional subprocessors
AI providers other than Groq (e.g., Anthropic, OpenAI, Google Gemini) are only engaged when a customer selects them. Customers on the Enterprise plan may require Newlight to use only a specific provider.