Last updated: October 2nd, 2026
Infrastructure & Hosting
| Subprocessor | Purpose |
|---|
| Cloudflare | Object storage (R2), edge compute (Workers, Durable Objects, KV), static hosting (Pages) |
| MongoDB | Primary application database |
| Fly.io | Application hosting and compute |
| Upstash (Redis) | Caching and real-time pub/sub |
Authentication
| Subprocessor | Purpose |
|---|
| WorkOS | User authentication, SSO, and session management |
Payments
| Subprocessor | Purpose |
|---|
| Stripe | Billing, subscriptions, and payment processing |
Analytics & Monitoring
| Subprocessor | Purpose |
|---|
| PostHog | Product analytics and usage tracking |
| Sentry | Error tracking and performance monitoring |
Communications
| Subprocessor | Purpose |
|---|
| Resend | Transactional email delivery |
| Plain | Customer support and feedback management |
AI & Machine Learning
| Subprocessor | Purpose |
|---|
| OpenAI | Image generation and editing |
| Replicate | Image generation |
| xAI | Image generation and editing |
| Recraft | Image generation and vectorization |
| Quiver AI | SVG generation and editing |
Desktop Distribution
| Subprocessor | Purpose |
|---|
| ToDesktop | Desktop app packaging, updates, and distribution |
| Subprocessor | Purpose |
|---|
| Google Workspace | Email, document storage, and internal collaboration |
| Slack | Internal team communication and incident response |
| Linear | Issue tracking and project management |
| Notion | Internal documentation and knowledge base |
CI/CD & Development
| Subprocessor | Purpose |
|---|
| GitHub | Source control, CI/CD pipelines (Actions) |
If you have questions about our subprocessors or data processing practices, contact us at operations@paper.design.