LegalSubprocessors
← BackSubprocessors
Last updated: June 1, 2026Notice period: 30 days for new additions
This page lists the third-party service providers ("subprocessors") that Tokenistt Labs, Inc. uses to deliver the Tokenistt service. These subprocessors may receive performance metadata (token counts, costs, latency, workspace labels) in order to provide their services. No subprocessor receives prompt content, source code, or LLM inputs/outputs — that data never leaves your machine.
Infrastructure & storage
SubprocessorPurposeData typeLocation
Amazon Web Services (AWS)Cloud infrastructure, database hostingPerformance metadataus-east-1 (USA)
SupabaseManaged Postgres database for metadata storageToken counts, costs, workspace dataus-east-1 (USA)
CloudflareCDN, DDoS protection, TLS terminationIP address (transient), request metadataGlobal (data never stored)
Authentication & identity
SubprocessorPurposeData typeLocation
ClerkAuthentication, user accounts, session managementEmail, name, session tokensUSA / EU (configurable)
Payments
SubprocessorPurposeData typeLocation
StripePayment processing and subscription managementEmail, tokenized card data, billing addressUSA / EU
Monitoring & reliability
SubprocessorPurposeData typeLocation
SentryError monitoring and crash reportingStack traces (no user data)USA
Grafana CloudInfrastructure metrics and alertingService health metrics (no user data)USA
PagerDutyIncident management and on-call routingAlert metadata (no user data)USA
Communication
SubprocessorPurposeData typeLocation
ResendTransactional email (receipts, security alerts)Email address, message contentUSA
Changes to this list
We provide 30 days' advance notice of new subprocessors via email to account owners. To object to a new subprocessor, contact legal@tokenistt.com. Previous versions of this list are available upon request.