// Trust center
Subprocessors
The third parties Surfil relies on to operate, and precisely what each one holds. None of them receives your source code - by construction, it never leaves the device.
Last updated 2026-07-11
| Subprocessor | Purpose | What they hold |
|---|---|---|
| Cloudflare | Edge compute (Workers), R2 object storage, DNS | Signed metadata batches, evidence and release artifacts. No source code, ever. |
| Supabase | Identity and dashboards; encrypted memory storage (Postgres, RLS) | Account identity and ciphertext memory. Memory is end-to-end encrypted; the store cannot read it. |
| Vercel | Hosting for the Hub web application | Serves the dashboard UI. No source code and no plaintext memory pass through it. |
| Stripe | Billing and payment processing | Billing identifiers and payment metadata. Card data is handled by Stripe and never touches Surfil. |
ⓘ This list changes only through the update process below. Material changes to subprocessors are announced before they take effect, so you can object if your agreement requires it.
More in the Trust Center