Subprocessors
Effective date: July 1, 2026
Last updated: July 2, 2026
Toasty uses the third parties below to help provide the Service. Each is bound by contractual obligations consistent with our Data Processing Addendum.
| Subprocessor | Purpose | Location | Notes |
|---|---|---|---|
| Vercel Inc. | Application hosting and edge network | United States | Runs the Toasty application |
| Supabase Inc. | Postgres database and storage | United States | Primary data store for CRM records |
| Anthropic PBC | AI text generation (Claude API) | United States | Does not train models on API data by default; no training opt-in |
| Google LLC | Mail transport (Gmail IMAP/SMTP) | United States | Via mailboxes the customer connects with their own credentials |
| Stripe Inc. | Payment processing | United States | Engaged upon billing launch; we never store full card numbers |
| Smartlead | Email warmup infrastructure | United States | Warms customer-connected mailboxes to build sending reputation |
| Email verification vendors (MillionVerifier, ZeroBounce, and similar) | Verification of business email addresses | United States / EU | Receive prospect email addresses solely to check deliverability |
Change Notice
Before adding or replacing a subprocessor, we will update this page at least 14 days in advance, as promised in the DPA. Customers who want email notice of changes can request it at privacy@sendtoasty.com. Objection rights are described in Section 4 of the DPA.