1. Overview
Klorra LLC engages the subprocessors listed below to provide infrastructure, AI inference, payments, communications, and operational tooling. As of the "Last Updated" date, all subprocessors handling Subscriber Content do so within the United States.
2. Current Subprocessors
| Subprocessor | Service Provided | Location | Data Categories |
|---|---|---|---|
| Stripe, Inc. | Payment processing, subscription billing | United States | Billing data; tokenized card refs |
| Clerk, Inc. | Authentication, identity, session mgmt | United States | Account credentials, login telemetry |
| Cloudflare, Inc. | Object storage (R2), CDN, security/WAF | United States | Plan files, generated Deliverables, web requests |
| Neon, Inc. | Managed Postgres database (primary) | United States (US-East) | Account, project, billing, audit metadata |
| Vercel Inc. | Application hosting, edge networking | United States | Web requests, app logs |
| Anthropic, PBC | LLM inference (Claude Opus family) | United States | Plan-page extracts and prompts during processing only |
| ActiveCampaign LLC (Postmark) | Transactional email delivery | United States | Recipient email, message metadata, content |
| Functional Software, Inc. (Sentry) | Application error monitoring | United States | Error stack traces, request metadata, scrubbed user IDs |
| Modal Labs, Inc. | Compute orchestration for processing pipelines | United States | Plan-page extracts during processing only |
| PostHog Inc. | Product analytics (page views, feature events) | United States | Page views, feature events, scrubbed user IDs (no session replay, no PII persistence) |
| GitHub, Inc. | Source code, CI/CD (no production data) | United States | Internal Klorra source only |
3. Changes
Klorra may add, remove, or replace subprocessors at any time, in its sole discretion. Updates are reflected on this page when made. KLORRA IS NOT OBLIGATED TO PROVIDE ADVANCE NOTICE OF SUBPROCESSOR CHANGES, except where such notice is expressly required by applicable law or by an executed Data Processing Addendum. Subscribers with an executed DPA should review that document for any negotiated notice or objection rights.
4. Internal Tooling (Non-Production)
Klorra also uses tools that do not process production Subscriber Content but support its corporate operations (for example, Google Workspace for internal email and file storage, Microsoft Outlook and Microsoft 365 for the founder's primary inbox, and 1Password for credential management). These tools are not subprocessors of Subscriber Content.
5. Contact
Subprocessor questions and DPA requests: legal@klorra.ai. Privacy questions: privacy@klorra.ai.