Subprocessors
Last updated July 24, 2026
This page publishes the third-party subprocessors Tidbit uses to provide the Service, together with each one's function, the categories of data it processes, and the region where it processes them. It forms part of the Tidbit Data Processing Addendum.
1. About this list
This page is the published list of the third-party subprocessors that Tidbit uses to provide the Service. A "subprocessor" is a service provider engaged by Tidbit that processes personal information (contained in Customer Content, Account Data, or website usage data) on our behalf. This list is referenced by, and forms part of, the Tidbit Data Processing Addendum (DPA).
Each entry states the subprocessor, the function it performs, the categories of data it processes, and the region in which it processes that data. We keep this list current; the "Last updated" date above reflects the most recent change.
2. Current subprocessors
| Subprocessor | Purpose | Data categories processed | Location / region |
|---|---|---|---|
| Anthropic, PBC | Upstream large language model (Claude) inference: every request you route through the gateway is forwarded to Anthropic and processed under Anthropic’s terms. | Customer Content: the full prompts, inputs, and completions you route through the gateway (pass-through). | United States |
| Google Cloud Platform (Google LLC) | Cloud hosting and compute (Cloud Run), managed database (Cloud SQL for PostgreSQL), object storage (Cloud Storage), and in-memory cache (Memorystore/Redis). | Account Data and personal information (encrypted at the application layer under a per-tenant key), usage and metering metadata, transient request-content blobs held for reliability, and, only where you opt in, redacted traffic samples. | United States |
| Google LLC (Google Analytics) | Product analytics for the public website: measures how the production site (usetidbit.ai) is used so we can understand and improve it. Not used for advertising. | Website usage and measurement telemetry: pages viewed, referring page, device and browser type, approximate location derived from IP address, and analytics cookie identifiers. No Customer Content. | United States (per Google’s data-location practices) |
| Amazon Web Services, Inc. (Amazon SES v2) | Transactional and product email delivery (account, security, and notification messages). | Recipient email address and the content of the email message. | United States |
| Stripe, Inc. | Payments, subscription checkout, billing portal, and billing webhooks. | Billing identity (name, email, and billing contact details) and Stripe customer and subscription identifiers. Card and payment-method data is collected and held directly by Stripe and never touches Tidbit’s systems. | United States |
3. Not third-party subprocessors
Some functions that are commonly outsourced are handled in-house at Tidbit and therefore involve no third-party subprocessor. Our bot-protection captcha is a self-hosted proof-of-work challenge that runs in our own process; it collects no behavioral data and sends nothing to any third party. The Service contains no third-party advertising or cross-site tracking technologies. The one third-party analytics tool we use is Google Analytics on the public website, listed above; the gateway and desktop app contain no third-party analytics.
4. Notice of changes
Before we add a new subprocessor or replace an existing one for a function that involves the processing of your personal information, we will update this page and give affected customers advance notice of at least 30 days before the new subprocessor begins processing. Notice is given by updating this page and, where you have subscribed to subprocessor-change notifications or provided an administrative contact, by email to that contact.
As described in the Data Processing Addendum, you may object to a new subprocessor on reasonable, documented data-protection grounds during the notice period. We will work with you in good faith to address the objection; if we cannot, the DPA describes your remedies.
5. Related documents
This list is referenced by our Data Processing Addendum, our Privacy Policy, and our Terms of Service. Questions can be sent to nibble@usetidbit.ai.