Afora Subprocessors
Last updated: August 29, 2026
Afora uses the following subprocessors to provide the Services. Each is bound by contract to process customer data only to provide its service to Afora. We give customers at least 30 days' notice before adding or replacing a subprocessor that processes customer data — subscribe to changes by emailing security@aforademo.com with the subject "subprocessor updates."
| Subprocessor | Purpose | Data touched | Location |
|---|---|---|---|
| Vercel Inc. | Web application hosting and delivery | Service data in transit; logs | United States |
| Hetzner Online GmbH | Agent instance hosting | Your instance: workspace, conversations, memory | Germany (EU) |
| Supabase Inc. | Application database | Account, instance, and billing records (encrypted at rest) | United States |
| Clerk Inc. | Authentication and user management | Names, emails, auth identifiers | United States |
| Stripe, Inc. | Billing and subscription payments | Billing contact and payment records (card data stays with Stripe) | United States |
| Tavily Inc. | Web search for agent research | Search queries your agent issues | United States |
| ElevenLabs Inc. | Voice synthesis for voice features | Text rendered to speech | United States |
| Resend, Inc. | Transactional email delivery | Recipient email addresses and message content for service emails | United States |
| Functional Software, Inc. (Sentry) | Error monitoring | Error reports and request metadata (scrubbed of secrets) | United States |
| PostHog, Inc. | Product analytics | Usage events and identifiers | United States |
Your AI Provider is not an Afora subprocessor. Your agent thinks with the Anthropic (Claude) or OpenAI (ChatGPT) account you connect; content sent there is processed under your own agreement and settings with that provider — see Privacy Policy §4.
Services you connect (for example GitHub, Google Workspace, Microsoft 365, Slack, Linear, Telegram) are platforms you authorize directly, not Afora subprocessors; our commitments for that data are in the Privacy Policy §5.