This page lists the technical sub-processors used by Freelance OS to deliver its services. Any change is notified to active accounts with a 30-day notice and a right of objection.
| Name |
Purpose |
Country |
Safeguards |
| Supabase |
PostgreSQL database, authentication, object storage |
EU (Frankfurt) |
Supabase DPA, RLS, AES-256 encryption at rest |
| Vercel |
Frontend hosting, serverless functions, CDN |
US |
Vercel DPA + SCC, TLS 1.3 |
| Name |
Purpose |
Country |
Safeguards |
| Stripe Payments Europe Ltd |
Payment processing, subscriptions, billing |
EU (Ireland) + US (group) |
Stripe DPA, PCI-DSS level 1, SCC for US transfer |
| Stripe Connect |
Payment onboarding for reseller workspaces |
US |
Stripe Connect DPA + SCC |
| Name |
Purpose |
Country |
Safeguards |
| Resend |
Transactional emails (auth, invoices, notifs) |
US (group) / EU (option) |
Resend DPA, SCC |
| Name |
Purpose |
Country |
Safeguards |
| Anthropic (Claude) |
Studio text content generation |
US |
Anthropic DPA, API zero-data-retention, SCC |
| Google Gemini |
Persona image generation, copy assistant |
US |
Google DPA, SCC |
| OpenAI |
Ads video generation (optional) |
US |
OpenAI DPA, SCC, training opt-out |
| Name |
Purpose |
Country |
Safeguards |
| Apify |
LinkedIn and ad library scraping (Meta, TikTok, Google) |
US |
Apify DPA, SCC |
| Fathom |
Meeting recording and transcription (opt-in per call) |
US |
Fathom DPA, SCC, explicit participant consent |
The following OAuth providers receive data when you connect an account. They act as controllers for their own data, and as recipients of the data you publish or retrieve via their APIs.
Access tokens are stored encrypted (AES-256-GCM) and isolated per workspace. They are deleted immediately when you disconnect an integration.
| Name |
Purpose |
Country |
| Google / YouTube |
Video publishing, Analytics, Calendar |
US |
| Google Ads |
Campaign, ad group, metrics, audience and conversion management |
US |
| TikTok |
Studio video publishing |
US/SG |
| TikTok Marketing API |
Campaign, creative, audience, lead, pixel event and reporting management |
US/SG |
| Instagram (Meta) |
Publishing, DM, Conversions API |
US |
| LinkedIn |
Content publishing, profile enrichment |
US |
| LinkedIn Advertising API |
Campaign, audience and ad reporting management |
US |
| Meta (Facebook) |
Pixel, Conversions API, Ads Manager, Lead Ads |
US |
| WhatsApp Business |
Workspace messages |
US |
| Name |
Purpose |
Country |
Safeguards |
| Google Analytics 4 |
Anonymized audience measurement (consent required) |
US |
Google DPA, SCC, IP truncation, anonymization on |
Before engaging a new sub-processor or replacing an existing one, Freelance OS notifies clients by email and updates this page. Clients may object to a substantial change within 14 days of notification and terminate without penalty.
For any sub-processor question: contact@freelance-os.fr.