← Back to Security & Trust

Subprocessors

Last reviewed July 15, 2026

These are the third-party providers that may process your data on GrantProof’s behalf, and exactly what each one receives. OpenAI, Stripe, and Resend only receive data if you use the feature that depends on them. All providers listed are located in the United States.

ProviderPurposeData sharedRegion
VercelApplication hosting and private file storage (Vercel Blob)Application traffic in transit and uploaded evidence files stored by GrantProofUnited States
NeonManaged PostgreSQL databaseStructured application records, including grants, budgets, evidence metadata, users, and audit eventsUnited States
OpenAIOptional Readiness Assistant, disabled unless configured and enabled; active GrantProof trial or subscription requiredMinimum computed readiness fields needed for the assistant action you explicitly request; never raw uploaded file contents, passwords, or billing dataUnited States
StripeSubscription billing when a customer subscribesBilling contact and payment details entered directly with Stripe; GrantProof does not receive full card numbersUnited States
ResendTransactional email, including invitations and configured digestsRecipient email address and the transactional message contentsUnited States

We will update this list before adding a new subprocessor that processes customer data. To be notified of changes, email erica@grantreadysystems.com.