Subprocessors

Last updated: August 19, 2026

Surface Labs, Inc. (“Surface”) engages the third-party subprocessors listed below to help deliver its services. A subprocessor is a third party that processes personal data on Surface's behalf in connection with providing the services to our customers.

The tables below identify each subprocessor, the purpose of its processing, and where that processing takes place. This page reflects our current subprocessors and is maintained as our services evolve.

Customers who have entered into a Data Processing Agreement with Surface may subscribe to notifications of changes to this list as set out in that agreement.

Infrastructure and platform

  • Amazon Web Services, Inc.

    Purpose
    Cloud infrastructure and hosting
    Location
    United States

  • Vercel, Inc.

    Purpose
    Application hosting and deployment
    Location
    United States

  • Cloudflare, Inc.

    Purpose
    CDN, edge network, and DDoS protection
    Location
    United States / Global

  • Supabase, Inc.

    Purpose
    Database and authentication
    Location
    United States

  • Upstash, Inc.

    Purpose
    Cache and message queue (Redis)
    Location
    United States

  • Trigger.dev Ltd.

    Purpose
    Background jobs and workflow orchestration
    Location
    United States

AI model providers

Used to power Surface's AI features, including lead scoring, enrichment, and agent workflows.

  • OpenAI, LLC

    Purpose
    Large language model inference
    Location
    United States

  • Anthropic, PBC

    Purpose
    Large language model inference
    Location
    United States

Analytics and internal operations

  • PostHog, Inc.

    Purpose
    Product analytics
    Location
    United States

  • Slack Technologies, LLC

    Purpose
    Internal notifications and communications
    Location
    United States

Model providers and training

Model training

Where Surface uses large language model providers to process customer personal data, that data is not used by those providers to train or fine-tune their models. Surface uses processing arrangements with these providers that prohibit such use.

Changes to this list

Surface may update its subprocessors from time to time. For customers with a Data Processing Agreement in place, Surface will provide notice of additions to this list, and an opportunity to object, in accordance with the terms of that agreement.

Questions

For questions about this list or Surface's data processing practices, contact privacy@withsurface.com.