Onnie uses the following third-party sub-processors to deliver its services. This page lists each processor, what they do, and what data they handle.
Last updated: June 28, 2026. If you have questions about how your data is processed, contact us at privacy@onnie.ai.
| Processor | Purpose | Data categories | Region | Privacy policy |
|---|---|---|---|---|
| Supabase | Database hosting, authentication, real-time subscriptions, and file storage | User accounts, workspace data, messages, files, session tokens | US (AWS us-east-1) | View → |
| Anthropic | AI model inference powering Onnie and Onniebots | Chat messages, workspace context sent as model input | US | View → |
| Google (Google Cloud) | OAuth authentication (Sign in with Google) | Google account email, name, profile picture | Global | View → |
| Resend | Transactional email delivery (notifications, invites, magic links) | Email addresses, email content | US | View → |
| Creem | Subscription billing and payment processing | Billing email, subscription status, payment method metadata (no raw card data) | EU | View → |
| Vercel | Web application hosting, edge network, and deployment infrastructure | IP addresses, request logs, deployed application data | Global (edge) | View → |
| Cloudflare | Edge workers for the Onnie AI engine and DDoS protection | Request metadata, AI engine payloads | Global (edge) | View → |
| GitHub | OAuth authentication (Sign in with GitHub) and source code hosting | GitHub account email, username, avatar | US | View → |
We may update this list as we add or remove sub-processors. Material changes will be announced via email to workspace owners at least 14 days in advance.