Sub-processors and AI
Last updated 29 October 2026
These are the companies that process personal data for Pledge. We tell workspace owners by email at least 30 days before we add or replace one.
Sub-processors
| Provider | What it does | Data | Where | Transfer basis |
|---|---|---|---|---|
| Vercel Inc. | Hosts the app, stores uploaded files and signed PDFs | All workspace data | Frankfurt, Germany | EU–US Data Privacy Framework, standard contractual clauses |
| Neon | Runs the database | All workspace data | Frankfurt, Germany | Standard contractual clauses for support access |
| Resend Inc. | Sends Pledge’s emails and receives email sent to a workspace’s lead address | Names, email addresses, email content | United States | EU–US Data Privacy Framework, standard contractual clauses |
| PostHog Inc. | Product analytics, only if you accept analytics cookies | Pages visited, clicks without their text, an account id | Frankfurt, Germany | Standard contractual clauses for support access |
| OpenAI | Runs the AI chat | Your messages and the workspace data needed to answer | United States | EU–US Data Privacy Framework, standard contractual clauses |
| Anthropic | Sorts and summarises incoming leads, only if a workspace uses Leads | Lead emails and their sender | United States | Standard contractual clauses |
| Microsoft | Reads a connected Microsoft 365 inbox, only if a workspace connects one to Leads | Emails in that inbox | Where the workspace’s Microsoft 365 is | The workspace’s own Microsoft agreement |
How Pledge uses AI
- AI chat. Your message and the data the AI needs to answer are sent to OpenAI. We ask OpenAI not to store the conversation, and OpenAI does not train on API data. Each user has a monthly limit.
- Lead sorting. Incoming leads are sent to Anthropic to sort and summarise. Anthropic does not train on API data.
- No training. We do not train AI models on your content, and we do not let our providers do so.
- A person decides. In the app, AI only proposes changes as cards you apply, and sending a contract always asks you to confirm.
Agents you connect are not sub-processors
If you connect Claude, ChatGPT, Codex or another agent to Pledge through MCP, you choose that provider, and the data you share goes to them under your agreement with them. They are not our sub-processors, and we have no control over what they do with the data. You can see and revoke agent access in Settings, AI.