Draft pending review by counsel — not yet in force
Subprocessors
Version 2026-10-16.1 · Effective · Not yet reviewed by counsel · Markdown
In short
- These are the companies that process personal data for Bridge to Brands, with purpose and region.
- Providers marked [TO BE CONFIRMED] have not been chosen yet; this list is updated before launch.
- We give 30 days' notice of a new subprocessor here and by email to account owners.
- Brands and the AI agents you connect are not our subprocessors; they act for themselves or for you.
This summary is for convenience. The full text below governs.
RunOps Inc. uses the following subprocessors to provide Bridge to Brands, under written contracts that meet the Data Processing Addendum. Changes are announced here, with the version and effective date updated, at least 30 days before a new subprocessor starts processing personal data, and by email to Account Owners.
1. Current list
| Subprocessor | Purpose | Data | Region |
|---|---|---|---|
| [Railway Corp. or Fly.io, Inc. — TO BE CONFIRMED] | application hosting (web app, API, MCP server, workers) | all Service data | [United States] |
| [Managed PostgreSQL and Redis provider — TO BE CONFIRMED] | database and message bus | all Service data, Portal Credentials encrypted | [United States] |
| Cloudflare, Inc. | DNS, TLS, web application firewall, CDN for the website | IP addresses, request metadata, data in transit | global edge |
| Google LLC | sign-in with Google (identity) | name, email, profile picture, Google account id | [United States] |
| [Email provider — TO BE CONFIRMED] | service and security email | name, email | [United States] |
| [Error and metrics tooling — TO BE CONFIRMED] | error reports and operational metrics (consumer data redacted) | request ids, technical data | [United States] |
| Stripe, Inc. | payments, only once billing starts | billing contact, payment details | [United States] |
2. Not subprocessors
2.1 Brands and their Dealer Portal platforms (for example NuORDER, Elastic Suite, Envoy, Epicuro, BigCommerce) receive Order data because you direct us to send it; they process it as independent controllers.
2.2 AI Agents you connect (for example Claude or ChatGPT) receive data at your request under your agreement with their provider.
Change log
| Version | Effective | Change |
|---|---|---|
| 2026-10-16.1 | 2026-10-16 | First list, pending provider selection and review by counsel. |