Legal
Subprocessor Factsheet
Prodio, Inc. d/b/a ChangeMapLast updated: September 10, 2026
ChangeMap uses carefully selected subprocessors to deliver, secure, operate, and support the Service. Each subprocessor is subject to contractual obligations relating to confidentiality, security, and data protection.
Current Subprocessors
| Provider | Purpose | Data Categories | Status | Location |
|---|---|---|---|---|
| Vercel | Hosting, application delivery, serverless compute, and consent-gated Web Analytics | Customer application traffic and content processed for delivery; operational logs; consented page paths and route patterns, referrers, approximate location, browser, operating-system, and device data | Active | United States |
| Supabase | Authentication, database, storage | Account, workspace, project, evidence, AI output, authentication, and operational data | Active | United States |
| OpenAI | Production AI inference | Customer-submitted content, bounded application context, and AI inputs and outputs | Active; general-purpose model training is not permitted | United States |
| Anthropic | Authorized AI inference provider | Customer-submitted content and context if activated | Authorized; not currently used for production inference | United States |
| Stripe | Billing and payments | Billing metadata and payment information | Active for billing | United States |
| Postmark | Transactional email | Email addresses, message content, and delivery metadata | Active | United States |
| Featurebase | Hosted support and help-center links and support email routing | Support requests, feedback, contact information, and related delivery metadata | Active when users access hosted support or email channels | EU/United States |
| Google Analytics | Consent-gated public marketing website analytics | Browser, device, and public-page usage data | Active on public marketing pages after consent | United States |
| Apollo | Consent-gated public marketing website visitor tracking | Browser, device, and public-page usage data | Active on public marketing pages after consent | United States |
| Cloudflare | DNS and network infrastructure | Network and routing metadata | Active infrastructure provider | United States |
Additional Commitments
- ChangeMap does not sell personal information.
- ChangeMap does not share personal information for cross-context behavioral advertising.
- Customer data is processed only as necessary to provide the Service.
- Changes to subprocessors may be reflected through updates to this factsheet.