Sub-processors
Last updated: August 2026
To provide Tidy Names we rely on a small number of trusted third-party services, known as sub-processors. Each one processes personal data only on our instructions and only to the extent needed to deliver its part of the service. This page lists our current sub-processors and forms part of our Data Processing Agreement.
| Sub-processor | Purpose | Data processed | Location |
|---|---|---|---|
| Neon | Primary application database (Postgres) | All application data - account details, security logs, and encrypted registrar credentials | United States |
| Vercel | Application hosting and content delivery | HTTP request metadata, IP addresses | United States |
| Stripe | Subscription billing and payment processing | Name, email, billing details (card data is held by Stripe, never by us) | United States |
| Resend | Transactional email delivery (sign-in links, alerts, notifications) | Name, email address | United States |
| Brevo | CRM and marketing email - contact-form enquiries and waitlist sign-ups from our public site | Name, email address, and the message or domain list you submit | European Union (France) |
| Microsoft (Entra ID) | Optional single sign-on (SSO) | Basic identity profile (name, email) - only if you sign in with Microsoft | United States / global |
| PostHog | Product analytics (loads only after you accept analytics cookies) | Product-usage events, device and session data | United States |
| Sentry | Application error monitoring | User ID and technical error context | United States |
| Upstash | Rate limiting and caching | No personal data (ephemeral, non-identifying keys) | United States |
A note on registrar APIs
When you connect a registrar (such as Cloudflare, GoDaddy, Namecheap, or Porkbun), Tidy Names uses the read-only credentials you provide to access your own registrar account. Those registrars are your service providers, not our sub-processors, and Tidy Names never makes changes to your domains, DNS records, or registrar settings.
International transfers
Most of our sub-processors are located in the United States; Brevo processes data within the European Union. Where personal data is transferred outside the UK or EEA, it is protected by appropriate safeguards. Details of the safeguards that apply are set out in our Data Processing Agreement, and each sub-processor above maintains its own data-protection terms.
Changes to this list
We update this page whenever we add or replace a sub-processor, and we revise the “last updated” date above. Customers who would like advance notice of changes can subscribe by emailing privacy@tidynames.com - we will notify you before a new sub-processor begins processing your data, so you have an opportunity to raise any concerns.
Contact
Questions about our sub-processors or data processing? Contact us at privacy@tidynames.com.