Legal
Sub-processors
Last updatedSeptember 30, 2026
Just as researchers use CustomTester to run their studies, we rely on a small number of trusted third-party vendors to run CustomTester. Where one of these vendors processes customer data on our behalf, it acts as a sub-processor.
Before we engage a sub-processor we review its privacy, security and compliance practices, and we bind it by contract to protect the data it handles. This page lists every sub-processor we currently use.
1. Core sub-processors
These vendors host, run or deliver the CustomTester service, and may process customer data in doing so.
- Cloudflare
- Purpose
- Proxied traffic
- Data location
- United States
- Website
- cloudflare.com
- DigitalOcean
- Purpose
- Hosting, database and file storage
- Data location
- United States
- Website
- digitalocean.com
- Google Gemini
- Purpose
- AI analysis and audio transcription
- Data location
- United States
- Website
- ai.google.dev
- Mailgun
- Purpose
- Email sending
- Data location
- United States
- Website
- mailgun.com
- PostHog
- Purpose
- Web analytics and session tracking
- Data location
- United States
- Website
- posthog.com
- Stripe
- Purpose
- Payment processing
- Data location
- United States
- Website
- stripe.com
- Termageddon
- Purpose
- Cookie consent
- Data location
- United States
- Website
- termageddon.com
2. Internal tools
These tools support how our team works. They may hold customer data when you contact us.
- Google Workspace
- Purpose
- Support correspondence
- Data location
- United States
- Website
- workspace.google.com
3. Updates
September 30, 2026 — First publication of this list.