---
title: "Subprocessors"
version: 2026-10-16.1
effective: 2026-10-16
reviewed_by: null
canonical: https://brdg2b.ai/legal/subprocessors
---

# Subprocessors

> **Draft pending review by counsel — not yet in force.**

Version 2026-10-16.1, effective 2026-10-16. Bridge to Brands is a product of RunOps Inc.

## In short

- These are the companies that process personal data for Bridge to Brands, with purpose and region.
- Providers marked [TO BE CONFIRMED] have not been chosen yet; this list is updated before launch.
- We give 30 days' notice of a new subprocessor here and by email to account owners.
- Brands and the AI agents you connect are not our subprocessors; they act for themselves or for you.

RunOps Inc. uses the following subprocessors to provide Bridge to Brands, under written contracts that meet the [Data Processing Addendum](/legal/dpa). Changes are announced here, with the version and effective date updated, at least **30 days** before a new subprocessor starts processing personal data, and by email to Account Owners.

## 1. Current list

| Subprocessor | Purpose | Data | Region |
|---|---|---|---|
| [Railway Corp. or Fly.io, Inc. — TO BE CONFIRMED] | application hosting (web app, API, MCP server, workers) | all Service data | [United States] |
| [Managed PostgreSQL and Redis provider — TO BE CONFIRMED] | database and message bus | all Service data, Portal Credentials encrypted | [United States] |
| Cloudflare, Inc. | DNS, TLS, web application firewall, CDN for the website | IP addresses, request metadata, data in transit | global edge |
| Google LLC | sign-in with Google (identity) | name, email, profile picture, Google account id | [United States] |
| [Email provider — TO BE CONFIRMED] | service and security email | name, email | [United States] |
| [Error and metrics tooling — TO BE CONFIRMED] | error reports and operational metrics (consumer data redacted) | request ids, technical data | [United States] |
| Stripe, Inc. | payments, **only once billing starts** | billing contact, payment details | [United States] |

## 2. Not subprocessors

2.1 **Brands and their Dealer Portal platforms** (for example NuORDER, Elastic Suite, Envoy, Epicuro, BigCommerce) receive Order data because you direct us to send it; they process it as independent controllers.

2.2 **AI Agents you connect** (for example Claude or ChatGPT) receive data at your request under your agreement with their provider.

## Change log

| Version | Effective | Change |
|---|---|---|
| 2026-10-16.1 | 2026-10-16 | First list, pending provider selection and review by counsel. |