Subprocessors
Every third-party service that processes Kinetry customer data. This list changes only when the product's integrations change — a new subprocessor is added here before it ships.
Vercel
Trust documentation →Purpose: Application hosting and compute
Data processed: All application traffic in transit; server logs
Location: United States
Certification: SOC 2 Type II (per Vercel's trust center)
Purpose: PostgreSQL database
Data processed: All customer data at rest (workspaces, people, assessments, scores)
Location: United States (AWS us-east-1)
Certification: SOC 2 Type II (per Neon's trust documentation)
Stripe
Trust documentation →Purpose: Payments and subscription billing
Data processed: Billing contact, subscription state, cancellation feedback. Card numbers never touch Kinetry
Location: United States
Certification: PCI DSS Level 1 service provider (per Stripe's documentation)
Resend
Trust documentation →Purpose: Transactional email delivery
Data processed: Recipient names, email addresses, and message content (sign-in links, invitations, results notices)
Location: United States
Certification: SOC 2 Type II (per Resend's security page)
Sentry
Trust documentation →Purpose: Error monitoring
Data processed: Error reports, configured without session replay or personal-data capture; residuals age out within 90 days
Location: United States
Certification: SOC 2 Type II (per Sentry's trust center)
Cloudflare (Turnstile)
Trust documentation →Purpose: Bot detection on signup
Data processed: Browser and network signals during the signup challenge only
Location: Global edge network
Certification: SOC 2 Type II (per Cloudflare's trust hub)
Change notification
To be notified when this list changes, email privacy@kinetry.ai with the subject "Subscribe to subprocessor changes" and you'll get an email before any new subprocessor starts handling customer data.
List current as of July 18, 2026. Related: Security & data protection · Privacy Policy