Subprocessors
Last updated: May 29, 2026
PrintReactor, LLC uses the third-party service providers listed below ("Sub-processors") to help us deliver our services. This list is maintained in line with our Data Processing Addendum and is updated when we add or replace a Sub-processor. We impose data-protection obligations on each Sub-processor that are no less protective than those we accept under our own DPA. Our marketing site and product origin are self-hosted behind a Cloudflare Tunnel.
Current and planned Sub-processors
| Vendor | Purpose | Data categories | Location | Role |
|---|---|---|---|---|
| Cloudflare, Inc. | DNS, CDN, WAF, Tunnel, DDoS protection, and Turnstile bot protection | IP addresses, request metadata, bot-protection tokens | Global edge network | Processor |
| Supabase, Inc. | Serverless functions backing our contact, beta, and newsletter forms; Postgres database for beta and newsletter records | Name, email, and form or newsletter submission content | USA (project region) | Processor |
| Postmark (ActiveCampaign, LLC) | Transactional and newsletter email delivery | Name, email, message content | USA | Processor |
| Slack Technologies, LLC | Internal team notifications of new contact and beta submissions | Name, email, submission content | USA | Processor |
| Stripe, Inc. | Payment processing, subscription billing, tax calculation (at paid launch) | Billing contact, tokenized payment data, transaction records | USA and Ireland | Processor |
| Google LLC | Google Analytics 4 aggregate web analytics (loads only with your consent) | Online identifiers, device and usage data | USA (EU-US Data Privacy Framework) | Processor |
| Microsoft Corporation | Microsoft Clarity heatmaps and session recordings (loads only with your consent) | Online identifiers, session interaction data | USA | Independent controller |
Some entries reflect vendors we are onboarding during our beta. Before we process a paying customer's data, we confirm a signed Data Processing Agreement with each Sub-processor. Note that for Microsoft Clarity, Microsoft acts as an independent data controller (not our processor) and may use the data for its own purposes, including advertising; see our Cookie Policy.
Infrastructure Sub-processors used by Sub-processors
Our Sub-processors may, in turn, rely on their own infrastructure providers (for example, the cloud platform that hosts Supabase). Those infrastructure providers are not listed individually here but are covered by each Sub-processor's flow-down obligations.
Change notifications
To receive at least 30 days' advance notice when we add or replace a Sub-processor, email [email protected] with "Subprocessor updates" in the subject line.
International transfers
Some Sub-processors are located outside the EEA, UK, Switzerland, Quebec, Australia, or Brazil. For such transfers we rely on the safeguards described in our Privacy Policy and our DPA, including the EU Standard Contractual Clauses and the UK International Data Transfer Addendum.