Sub-processors
Effective Date: April 17, 2026
Cactus engages the third-party vendors below (“Sub-processors”) to help provide the Services. We require each Sub-processor to protect Customer Content under contractual terms no less protective than our own, and we do not permit Sub-processors to use Customer Content to train generally available foundation models. This list is provided for transparency and may change as we add, remove, or replace vendors.
To receive email notifications of changes to this list, write to support@trycactus.com.
Infrastructure and Hosting
Hosting, storage, and infrastructure| Vendor | Purpose | Data | Location |
|---|
| Vercel Inc. | Application hosting, edge runtime, and blob storage | Account data, Customer Content, usage/log data | United States |
| Supabase Inc. | Managed PostgreSQL database | Account data, Customer Content, usage data | United States |
| Amazon Web Services, Inc. | Object storage (S3) for parsed documents and attachments, email delivery (SES) | Customer Content, transactional email content | United States (us-east-1) |
| Upstash Inc. | Redis-compatible cache and session/queue store | Session tokens, cached job state | United States |
AI and Data Providers
AI inference, document parsing, and data| Vendor | Purpose | Data | Location |
|---|
| Vercel AI Gateway | Routing and logging for AI provider requests | Prompts, Customer Content passed to AI features | United States |
| Google LLC (Gemini API) | Large language model inference (chat, reasoning, extraction) | Prompts and Customer Content you submit to AI features | United States |
| Anthropic, PBC (Claude API) | Large language model inference | Prompts and Customer Content you submit to AI features | United States |
| xAI Corp. (Grok API) | Large language model inference | Prompts and Customer Content you submit to AI features | United States |
| Reducto AI, Inc. | Document parsing and layout extraction | Uploaded documents (e.g., OMs, rent rolls, T12s) | United States |
| Qdrant Solutions GmbH | Vector database for document embeddings | Document embeddings and metadata | United States / European Union |
| Tavily, Inc. | Web search for research-grounded AI features | Search queries derived from your prompts | United States |
| Google LLC (Maps Platform) | Geocoding, mapping, and points of interest | Property addresses and coordinates | United States |
Analytics and Monitoring
Product analytics and error monitoring| Vendor | Purpose | Data | Location |
|---|
| PostHog Inc. | Product analytics and feature flags | Account identifiers, event metadata, usage data | United States |
| Functional Software, Inc. (Sentry) | Error and performance monitoring | Error traces, request metadata, user identifiers | United States |
| Finto Technologies, Inc. (Langfuse) | LLM tracing and evaluation | Prompts, Output, evaluation metadata | United States / European Union |
Billing, Identity, and Workflow
Payments, authentication, and notifications| Vendor | Purpose | Data | Location |
|---|
| Stripe, Inc. | Payment processing, subscription and invoice management | Billing contact, payment tokens, transaction data (we do not store full card numbers) | United States |
| Slack Technologies, LLC | Internal notifications (e.g., feedback, alerts) | Account identifiers and content you explicitly submit via feedback tools | United States |
| Google LLC (Google Sign-In) | Authentication via Google accounts | Email, name, profile image | United States |
Notes
- Customers who require a Data Processing Agreement (DPA) can request one at support@trycactus.com.
- This list supplements the disclosures in our Privacy Policy. For categories of data collected, purposes of processing, and your privacy rights, please review that policy.
