Subprocessor and Third-party Services Notice
Effective October 8, 2026
subprocessors-2026-10-08-v1
This notice identifies the principal service-provider categories used by KeepCarrier LLC. It distinguishes our processors from customer-selected communications providers and public data sources. It is incorporated into the Data Processing Addendum; a listing alone is not a claim of certification or an executed cross-border transfer agreement.
On this page
Hosting, storage and request protection
Amazon Web Services supplies application hosting, PostgreSQL database, object storage, network delivery, logs, backups and runtime secret infrastructure. The primary application database and storage are in us-east-1 in the United States; network delivery and authorized operations can involve other locations. Categories include customer workspace data, uploaded files and limited service/security metadata.
Upstash provides the configured Redis service for request limits, coordination and related cache/queue metadata. Its processing location follows the configured service and contractual terms; we do not describe every cache as residing in the same region as the main database. Data sent to this service is limited to what the feature needs.
Required service email
Resend is the current transactional email provider for signup, invitations, billing, recovery and platform support notices. It receives necessary recipient addresses, message content and delivery metadata. Amazon SES is a configured alternative, not a second route that duplicates every send. Email delivery crosses recipient networks and cannot be confined to the application's database region.
Customer-selected and independent services
A customer's chosen SMTP/mailbox and calling or messaging applications process under that customer's arrangements. KeepCarrier sends authorized outreach through the customer's connected mailbox; external calling/texting is a handoff, not a KeepCarrier telephony account. Optional Google sign-in uses Google's identity service under its applicable terms. Government registry sources such as FMCSA and NHTSA supply public records; they are not recipients of private tenant activity merely because we retrieve registry facts.
Our own social-media connections are for KeepCarrier's platform accounts, not access to customer social accounts. The Privacy Policy describes that independent activity. Paid third-party AI processing of customer content is not implied by this notice; introducing it requires appropriate disclosure, instructions and safeguards.
Changes and objections
We maintain this versioned notice and communicate material additions/replacements under the Data Processing Addendum. Contact support for current provider/transfer details or a reasonable data-protection objection. An organization's authorized representatives are responsible for maintaining a reachable contact address and reviewing notices.