Subprocessors
Who handles your data for us.
The companies that run a part of Wendy, what each one holds, where, and since when. Two more rows are the accounts you can connect: they hold your data already, and we read from them only under your own grant.
Last updated September 26, 2026Previous versions →
The list.
| Subprocessor | Purpose | Data | Region | Added |
|---|---|---|---|---|
| Vercel Inc. | Hosting, server functions and scheduled jobs. | Request data in transit; thirty days of logs that carry ids, timing and status codes, never content. | United States (US East, iad1)Their own subprocessors → | |
| Google Firebase (Google LLC) | Sign-in, database and file storage. | Your account, your answers and report, what Wendy keeps for you at work and at home, workspace data and exports; connector tokens, encrypted before they are stored. | United States (nam5)Their own subprocessors → | |
| Anthropic, PBC | AI model inference: your report and reviews, daily chat with its safety check, and the one-line notes from accounts you connect. |
| United States | |
| Stripe, Inc. | Payments and subscriptions. | Name, email, card (held by Stripe, never by us) and invoices. | United States | |
| Resend, Inc. | Transactional email: sign-in codes, the mail that says your report is ready, and the notices we send you. | Your email address and the text of the notices we send you. | United States | |
| Upstash, Inc. | Rate-limit counters. | Hashed keys and counts; nothing that names a person. | United States | |
| PostHog, Inc. | Product analytics, captured on our server, without cookies. | Event names and a short allowlist of properties keyed by account id or demo visitor id; never answers, scores, names or text. | United States (US cloud) | |
| Google (Gmail and Google Calendar)A source you connect | A source you can connect, read-only, under your own grant. | Your mail and calendar, each item read once in memory and turned into a one-line note. Learned from your communications, no messages are ever kept. Nothing is written back. | Your own account, where Google keeps it | |
| Microsoft (Outlook mail and calendar)A source you connect | A source you can connect, read-only, under your own grant. | Your mail and calendar, each item read once in memory and turned into a one-line note. Learned from your communications, no messages are ever kept. Nothing is written back. | Your own account, where Microsoft keeps it |
Changes.
We email account holders 30 days before adding a subprocessor. Workspace owners may object within that time; if we cannot resolve the objection, they may end their plan and receive a pro-rata refund.
Former subprocessors.
A vendor we stop using stays on this list for twelve months after it goes.
None so far.
Who we are.
Wendy is AskWendy LLC, a Virginia limited liability company, at 4726 16th Rd N, Arlington, VA 22207. A question about a row on this list goes to support@askwendy.ai.
Version.
This page: version 1, September 26, 2026.