Tegy Subprocessors
Effective and last updated August 6, 2026
This page is the current list of Subprocessors referenced in the Tegy Data Processing Addendum. It identifies each Subprocessor engaged to process Customer Personal Data in connection with the Tegy Service, the service it provides, and its primary processing location.
Capitalized terms have the meaning given in the DPA or the Tegy Terms of Service.
1Current Subprocessors
- Supabase Pte. Ltd. Database, authentication, and file storage for the Tegy application. Primary processing location: United States.
- Cloudflare, Inc. Content delivery, DNS, application hosting, and network security. Primary processing location: United States, delivered through a globally distributed edge network.
- OpenRouter, Inc. AI routing for inference requested through the Service. Primary processing location: United States. OpenRouter engages the underlying model and infrastructure providers that fulfil a request under its own terms, and those providers may process data in other locations. The models and providers available through the routing layer change over time.
- PostHog, Inc. Product analytics and session replay for the Tegy application. Primary processing location: United States.
2Merchant of record
Polar Software, Inc. acts as merchant of record and authorized reseller for paid self-service transactions, as described in Section 5.1 of the Terms of Service. Polar may act independently as merchant of record under its own terms, and the Polar Buyer Terms and Polar Privacy Policy apply to its checkout and transaction processing. Polar is identified here for transparency rather than as a Subprocessor engaged to process Customer Personal Data on Tegy's behalf.
3Changes to this list
Tegy will provide at least 15 days' notice before a new Subprocessor begins materially processing Customer Personal Data, by updating this page and using an email, in-product, or subscription notice mechanism. A shorter period may apply where necessary to address an emergency, security risk, provider discontinuation, or legal requirement, in which case Tegy will give notice as soon as reasonably practicable.
A customer may object during the notice period on reasonable, documented data-protection grounds. Section 7.3 of the DPA describes how objections are handled.
4Contact
Questions about this list, or an objection to a new Subprocessor, may be sent to privacy@tegy.io.
