Sub-processors
Effective date: May 1, 2026 Last updated: July 19, 2026
What this is
To run RedlineX, we rely on a short list of vetted third-party providers who process personal data on our behalf, under contract ("sub-processors"). This page is the single, authoritative list. Our Privacy Policy, Terms of Service, and Cookie Policy refer to these providers by role (for example, "our authentication provider") and link here for the specifics.
We keep this list current and update it when our providers change.
Current sub-processors
| Role (as referenced in our policies) | Provider | What they do | Data involved |
|---|---|---|---|
| Authentication provider | Auth0 (Okta) | Account sign-in and identity/session security | Email, identifiers, authentication metadata |
| Payment processor | Stripe | Subscriptions, payments, and promoted placements | Billing metadata (we do not store full card numbers) |
| Identity-verification provider | Stripe Identity | Optional government-ID and biometric verification | ID documents & biometric check (processed by the provider; we receive only the result) |
| Cloud infrastructure provider | Amazon Web Services (AWS) | Hosting, media storage (S3), and logging (CloudWatch) | All categories of data, as hosted |
| Image-moderation provider | AWS Rekognition | Automated moderation of uploaded images | Uploaded images |
| AI provider | Anthropic | AI Q&A and recommendations | Content sent to generate responses (not used to train models) |
| Product analytics provider | Amplitude | Product usage analytics and session replay | Usage events, device/interaction data, opaque identifiers |
| Error- and performance-monitoring provider | Sentry | Crash, error, and performance diagnostics | Diagnostic/technical data |
| Maps and geocoding provider | Mapbox | Map display and geocoding | Location data you enter or view |
| Email delivery provider | Amazon SES (AWS) | Transactional and notification emails | Email address and message content |
| Vehicle data sources | Tavily, NHTSA vPIC | Reference data to enrich the vehicle catalog | Vehicle reference data (not personal data about you) |
International transfers
Several providers operate outside your country, including in the United States. Where we transfer personal data out of the EEA, UK, or Switzerland, we rely on appropriate safeguards such as the Standard Contractual Clauses (and the UK Addendum where applicable). See the Privacy Policy for details.
Changes to this list
When we add or replace a sub-processor, we will update this page (and the "Last updated" date) and, where required by contract or law, provide advance notice.
Contact
Questions about our sub-processors: privacy@redlinex.app.