Sub-processors
Effective date: April 2026 · Last updated: April 2026
MentorNeko uses the following third-party sub-processors to deliver our platform services. Each sub-processor is bound by data processing terms that are at least as protective as those in our Data Processing Agreement.
| Sub-processor | Purpose | Location | Certifications |
|---|---|---|---|
| Vercel Inc. | Application hosting, edge network, serverless functions, AI Gateway | United States | SOC 2 Type II, ISO 27001 |
| Neon Inc. | Serverless PostgreSQL database | United States (AWS) | SOC 2 Type II |
| Cloudflare Inc. | Object storage (R2), CDN | Global | SOC 2 Type II, ISO 27001 |
| Inngest Inc. | Background job orchestration | United States | SOC 2 Type II |
| Resend Inc. | Transactional email delivery | United States | SOC 2 Type II |
| Upstash Inc. | Rate limiting, caching, vector embeddings | United States (AWS) | SOC 2 Type II |
| Anthropic PBC | AI language model processing (via Vercel AI Gateway, ZDR) | United States | SOC 2 Type II |
| Google LLC | AI language model processing (via Vercel AI Gateway, ZDR) | United States | SOC 2 Type II, ISO 27001 |
| OpenAI Inc. | AI language model processing (via Vercel AI Gateway, ZDR) | United States | SOC 2 Type II |
AI provider note: All AI model providers (Anthropic, Google, OpenAI) are accessed exclusively through Vercel AI Gateway with Zero Data Retention (ZDR) enforced. No customer data is stored by or used to train AI models. Profiles are anonymized before processing. No names, emails, or other identifying information is sent to any AI provider.
Changes to Sub-processors
We will notify organization administrators by email at least 30 days before adding a new sub-processor or making a material change to how an existing sub-processor is used. This page will also be updated to reflect any changes.
If you have questions about our sub-processors, please contact us at dpa@mentorneko.com.