Subprocessors

DRAFT list — aligned with the draft Privacy Policy. Counsel should confirm vendors and regions before launch messaging treats this as final.

Last updated: 11 August 2026 (draft)

Liforma may use the following categories of subprocessors when providing the Services. See the Privacy Policy for how personal data is handled.

Category	Examples / role
Application hosting	Vercel — hosting for www, api, player, app, my, docs, and related web apps
CDN & object storage	Cloudflare — CDN, R2 storage for SDK / published assets / browser model artifacts
Database	Supabase — PostgreSQL platform database accessed via Prisma from the API
Authentication	Auth.js providers — e.g. Google OAuth and email magic link (transactional email via Resend or equivalent)
Speech & language models	Configured STT / LLM / TTS providers per project pipeline (cloud placement). Product surfaces use Liforma capability names (for example Liforma Text-to-Speech).
Billing	Stripe — when paid plans are enabled
Email delivery	Transactional email for magic links, invites, and operational messages

We may update this list as vendors change. Material changes will be reflected by updating the date above.

Questions: legal@liforma.ai. Related: Data Processing Addendum.