Subprocessors
Effective: July 3, 2026 · Last updated: July 2026
What this page is
Quarry uses third-party services ("subprocessors") to deliver its audit, hosting, and support functions. This page lists every one of them so customers can review who touches data processed through Quarry. If a subprocessor changes, we update this page; for changes material to how your data is handled, we notify active customers by email in advance — at least 30 days where practicable.
Infrastructure & hosting
| Service | Purpose | Data category | Location |
|---|---|---|---|
| Vercel, Inc. | Application hosting, edge network, serverless compute | All data flowing through Quarry | USA (global edge) |
| Supabase Inc. | Primary database (Postgres), authentication | Account data, tenant data, location confirmations | USA |
| Upstash, Inc. | Redis cache & scan-result storage | Roster data, scan results, operational state | USA |
Communications, security & analytics
| Service | Purpose | Data category | Location |
|---|---|---|---|
| Resend, Inc. | Transactional email (verification codes, account/status notices, report delivery) | Recipient name + email, message content | USA |
| Cloudflare, Inc. (Turnstile) | Bot protection on public forms | Browser/interaction signals, IP | USA (global network) |
| PostHog, Inc. | Product analytics + error capture | Usage events, page views, identifiers/cookies | USA |
| Functional Software, Inc. (Sentry) | Production error monitoring | Error events, stack traces (may incidentally contain customer data) | USA |
| GitHub, Inc. | Source code repository & CI | Source code only (no customer data) | USA |
Data & search providers used during scans
| Service | Purpose | Data sent | Location |
|---|---|---|---|
| Google LLC (Maps Platform) | Place lookup, place details, competitor search, geocoding, PageSpeed | Business names, addresses, place IDs, website URLs | USA |
| Apify Technologies s.r.o. | Google Business Profile post and review scraping | Place IDs, brand names | EU (Czech Republic) |
| Outscraper LLC | Alternative reviews & place-details scraping | Place IDs | USA |
| Microsoft Corporation (Azure Maps) | Primary place resolution | Business names, addresses | USA |
| Geoapify GmbH | Secondary place resolution fallback | Business names, addresses | EU (Germany) |
| Foursquare Labs, Inc. | Multi-location chain search | Brand names | USA |
| Firecrawl (SideGuide Technologies, Inc.) | Website content extraction during onboarding/scans | Customer website URLs | USA |
| Brave Software, Inc. (Search API) | Supplemental search grounding for AI Visibility | City-level queries (no PII) | USA |
AI providers
| Service | Purpose | Data sent | Location |
|---|---|---|---|
| Anthropic, PBC (Claude) | AI Visibility analysis, CSV column mapping, onboarding assistance | Business names, cities, brand metadata; CSV row samples during onboarding | USA |
| OpenAI OpCo, LLC (ChatGPT) | Multi-LLM AI Visibility (add-on) | Business names, cities | USA |
| Google LLC (Gemini) | Multi-LLM AI Visibility (add-on) | Business names, cities | USA |
| Perplexity AI, Inc. | Multi-LLM AI Visibility (when configured) | Business names, cities | USA |
Payments (future)
Stripe, Inc. will become a subprocessor when payment processing launches (billing contact info and payment-method tokens; Quarry never stores card numbers). This page will be updated first.
Your choice on subprocessors
Customers who object to a particular subprocessor — for example, declining data flow to AI providers — may not be able to use the corresponding feature. Where reasonably possible we offer feature-level ways to avoid a specific flow. Questions about any vendor: hello@joinquarry.com.