Sub-Processors
Last updated: June 2026
What Are Sub-Processors?
Sub-processors are third-party service providers that process personal data on our behalf to help us deliver the Braiv platform. They may store, analyze, transmit, or otherwise handle your data according to our instructions and under contractual data protection obligations.
How We Select Sub-Processors
Before engaging a sub-processor, we conduct due diligence to assess their security practices, privacy compliance, and data handling capabilities. Each sub-processor is bound by a Data Processing Agreement (DPA) or equivalent contractual terms that require them to protect your data and process it only for the purposes we specify.
Changes to This List
We update this page when we add or remove sub-processors. For material changes that affect how your data is processed, we will notify active users by email. We encourage you to review this page periodically.
Current Sub-Processors
| Sub-Processor | Purpose | Data Processed | Location | DPF Certified |
|---|---|---|---|---|
| Google LLC (Firebase) | Authentication, database, cloud functions, file storage | Account data, content, usage | US | Yes |
| Google LLC (Analytics/GTM) | Website analytics, tag management | Usage data, IP address, device info | US | Yes |
| Google LLC (YouTube API) | Video publishing, channel management | Video metadata, channel data | US | Yes |
| PostHog Inc | Product analytics, feature flags | Usage events, page views, device info | US | Yes |
| Stripe Inc | Payment processing, subscriptions | Billing data, payment method (tokenized) | US | Yes |
| Functional Software Inc (Sentry) | Error monitoring, performance, session replay | Error data, session recordings, device info | US | Yes |
| Intercom Inc | Customer support, messaging | Name, email, support conversations | US | Yes |
| Tolt | Affiliate program tracking | Referral codes, attribution data | US | No |
| Mux Inc | Video quality analytics | Playback metrics, video metadata | US | Yes |
| Vercel Inc | Application hosting, edge functions | Request data, IP (for geo-routing) | US | Yes |
| Google Cloud Storage | Media file storage, CDN | Uploaded videos, images, audio | US | Yes |
DPF = EU-US Data Privacy Framework. Sub-processors marked "Yes" are certified under the DPF or an equivalent adequacy mechanism.
Contact
If you have questions about our sub-processors or data processing practices, contact us at support@braiv.co.