Sub-processors
Last updated: 2026-05-08 · Version 1.0
The following vendors process personal data on behalf of ATLOM in support of our service. We sign a Data Processing Agreement (DPA) with each, and rely on Standard Contractual Clauses (or equivalent) for any international transfer.
| Vendor | Purpose | Data categories | Region |
|---|---|---|---|
| Railway | Application hosting | All service data | US / EU |
| Cloudflare | DNS, WAF, edge caching | IP, request metadata | Global |
| AWS S3 / CloudFront | Media storage and delivery | Audio, photos, video | US / EU |
| Stripe | Payments (web) | Billing identifiers, charge records | US / EU |
| Apple App Store | Payments (iOS) | Billing identifiers | Global |
| Google Play | Payments (Android) | Billing identifiers | Global |
| Anthropic | AI Coach (Elite) | Prompted text, response | US |
| ElevenLabs | Text-to-speech (Elite) | Prompted text, generated audio | US |
| Resend | Transactional + contact-form email | Email addresses, message body | US / EU |
| Sentry | Crash and error reporting | Stack traces, scrubbed metadata | US / EU |
| Upstash | Rate-limit and cache | IP-keyed counters | Global |
| Plausible | Cookieless web analytics (marketing site only) | Aggregated traffic, no PII | EU |
Updates
We will post material additions or removals to this list and, where required, notify customers through the application or by email.