A sub-processor is a third party we instruct to process your data on our behalf in order to provide the Herald service. This is distinct from the integrations you connect to Herald (Stripe, Intercom, Linear, and so on), which are your data sources — not our sub-processors. You have a direct relationship with each of those under their own terms.
We update this list when it changes. Material additions — where a new sub-processor will access data you have not previously consented to share with them — are announced at least 30 days before they take effect via the changelog and by email to account owners. Minor updates (changes to existing entries, removal of a sub-processor) are reflected here immediately. See also the Privacy Policy §7 and the Security page for architectural context.
Infrastructure
| Name | Purpose | Data accessed | Region | Added |
|---|---|---|---|---|
| Cloudflare | Workers compute, Durable Objects, R2 object storage, Vectorize, Workers KV, D1, Analytics Engine, Email Routing, Secrets Store | all tenant data (encrypted at rest by default; per-tenant DO isolation) | global edge | |
| Sentry | error tracking and performance monitoring | error stack traces, request metadata; no payload bodies, no PII intentionally shipped (filtered at boundary) | us |
Privacy policy: Cloudflare , Sentry .
AI providers
| Name | Purpose | Data accessed | Region | No training | Added |
|---|---|---|---|---|---|
| Cloudflare AI Gateway | rate limiting, caching, and observability for outbound LLM calls | AI request/response payloads — counts and shape hints, never raw tenant data | global edge | ✓ | |
| Anthropic | Claude language models accessed through AI Gateway | aggregated counts, schema shape hints, semantic annotations — never raw events, customer emails, or conversation contents | us | ✓ | |
| OpenAI | embeddings + GPT models accessed through AI Gateway | aggregated counts, schema shape hints, semantic annotations — never raw events, customer emails, or conversation contents | us | ✓ |
Privacy policy: Cloudflare AI Gateway , Anthropic , OpenAI .
Payments
| Name | Purpose | Data accessed | Region | Added |
|---|---|---|---|---|
| Stripe | billing for the Herald subscription itself (your customers' Stripe accounts are not a sub-processor relationship — those are direct integrations) | your billing email, name, payment method | global |
Privacy policy: Stripe .
Email delivery
| Name | Purpose | Data accessed | Region | Added |
|---|---|---|---|---|
| Cloudflare Email Workers | transactional email delivery (briefings, magic links) | your email address, briefing subject lines and bodies | global edge |
Privacy policy: Cloudflare Email Workers .
Questions
If you have questions about this list or want to object to us engaging a new sub-processor, write to privacy@withherald.co. For enterprise customers who require a contractual sub-processor notification mechanism, it's available as part of our Data Processing Addendum.