Sub-Processors
Third-party service providers and sub-contractors we use to operate Nashr.
Last updated: 2026-09-28
| Name | Purpose | Location | Category | DPA |
|---|---|---|---|---|
| Supabase | Database hosting, authentication, and file storage | Frankfurt, Germany (eu-central-1) | Infrastructure | DPA |
| Paddle | Payment processing and subscription management (Merchant of Record) | United Kingdom | Payments | DPA |
| Resend | Transactional email delivery (primary) | United States (us-east-1) | Communications | DPA |
| Ayrshare | Social media publishing API (Facebook, Instagram, etc.) | United States | Infrastructure | DPA |
| OpenRouter | AI routing — sends AI requests to the model providers listed below (Mistral AI, Alibaba Qwen, and TypeSafe Jev) | United States | AI | No DPA link |
| Mistral AI | AI content generation (primary — Saba model) | European Union | AI | DPA |
| Qwen (Alibaba Cloud) | AI content generation (fallback) | Routed by OpenRouter; may be outside your country | AI | DPA |
| TypeSafe (Jev) | AI content generation (via OpenRouter) | Routed by OpenRouter; may be outside your country | AI | No DPA link |
| Sentry | Error monitoring and performance tracking | United States | Analytics | DPA |
| Axiom | Log aggregation and observability | European Union | Analytics | DPA |
| PostHog | Product analytics and user behavioral event tracking | European Union (eu.i.posthog.com, Frankfurt) | Analytics | DPA |
| Plausible | Privacy-friendly, cookieless website analytics | European Union | Analytics | DPA |
| Firecrawl | Merchant website content extraction (text and metadata) for AI content generation | United States | Infrastructure | No DPA link |
| Serwist | Web push notification infrastructure (client library) | n/a (client-side library, no data processing) | Infrastructure | No DPA link |
| Railway | Application hosting, backend servers and background job processing | European Union (Netherlands, europe-west4) | Infrastructure | DPA |
| Expo (push notifications) | Mobile app push notification delivery (push token and notification content) | United States | Infrastructure | No DPA link |
| Firebase Cloud Messaging (Google) | Android push notification delivery (push token) | United States | Infrastructure | DPA |
| Apple Push Notification service (Apple) | iOS push notification delivery (push token) | United States | Infrastructure | No DPA link |