Subprocessor List

Third-party companies UnitFull engages to process customer data in delivering the Services. These subprocessors are subject to binding data-protection obligations in accordance with our Data Processing Addendum.

Effective: June 5, 2026

Last updated: June 5, 2026

Get change notices (DPA §7.3). We'll email you at least 10 days before any new subprocessor begins processing personal data — giving you time to object per the DPA.

Infrastructure & Hosting

Vercel Inc.

United States

App + marketing site hosting
Privacy policy
Neon, Inc.

United States

Managed PostgreSQL (primary data store)
Privacy policy
Cloudflare, Inc.

United States

DNS and inbound email routing
Privacy policy

Payments

Stripe, Inc.

United States

Payment processing (Stripe Connect) and tenant identity verification (Stripe Identity)
Privacy policy

Communications

Twilio Inc.

United States

SMS delivery and phone number provisioning
Privacy policy
Resend, Inc.

United States

Transactional and marketing email delivery
Privacy policy
Vapi AI, Inc.

United States

AI voice agent infrastructure
Privacy policy

Monitoring & Analytics

Functional Software, Inc.

United States

Application error monitoring (Sentry)
Privacy policy
Plausible Analytics

European Union

Privacy-first marketing-site analytics
Privacy policy

CRM

HubSpot, Inc.

United States

CRM and marketing-site lead capture (migrating to a first-party owned layer post-launch)
Privacy policy

Note on payment processing

UnitFull offers two payment-processor tracks. Customers on the bundled track use Stripe Connect managed by UnitFull; customers on the BYO track supply their own Stripe credentials, in which case Stripe acts as your direct processor rather than a UnitFull subprocessor. Your subscription agreement specifies which track applies to your account.

Notice of changes

UnitFull will notify customers of new subprocessors via email to the billing contact at least 10 days before the new subprocessor begins processing personal data (DPA §7.3). Customers may object within that window per the DPA objection mechanism.