Legal
Subprocessors
Last updated: October 28, 2026
HardLabs uses third-party providers to operate and deliver its Services.
The providers below may process Customer Personal Data depending on how a customer uses HardLabs.
| Provider | Purpose | Information Potentially Processed |
|---|---|---|
| Vercel Inc. | Application hosting, deployment, networking, compute | Application requests, technical metadata, logs, Customer Content processed through application infrastructure |
| Fly.io | Hosting of the HardLabs job-processing API | Uploaded Customer Content, job requests and results, technical metadata, logs |
| Cloudflare, Inc. — R2 | Object storage | Uploaded Customer Content, technical files, associated metadata |
| Supabase | Managed Postgres database | Account records (name, email address, sign-up and last sign-in times), job and organization index, waitlist and pilot sign-up records (email address, form type, referring page, pseudonymous visitor identifier, country) |
| Clerk, Inc. | Authentication and user management | Name, email address, authentication information, account metadata, device/IP information |
| Slack | Internal operational notifications to the HardLabs team | Email address and name of new sign-ups and accounts, approximate (city-level) location and time zone, device/browser type, pseudonymous visitor identifier, account and organization identifiers, project names and upload summaries, product usage records (features used, simulation sessions, file names and sizes) |
| OpenAI | AI model inference and AI-assisted engineering functionality | Portions of Customer Content submitted for AI-assisted processing |
| Anthropic PBC | AI model inference and AI-assisted engineering functionality | Portions of Customer Content submitted for AI-assisted processing |
| Google LLC — Google Workspace | Business and support email | Contact information, communications, attachments, email metadata |
HardLabs also uses the following analytics providers:
| Provider | Purpose |
|---|---|
| Google LLC — Google Analytics | Public website traffic and usage analytics |
| Microsoft Corporation — Microsoft Clarity | Interaction analytics, heatmaps and session replay on the public website and in the HardLabs application (application page text masked; pseudonymous user identifier) |
HardLabs does not send proprietary Customer Content from authenticated engineering workflows to Google Analytics or Microsoft Clarity: Google Analytics does not run in the application, and Clarity records it with all page text masked.
AI Providers
HardLabs uses commercial/API offerings from OpenAI and Anthropic.
HardLabs does not authorize Customer Content to be used for generalized model training unless the applicable customer expressly opts in.
Only information reasonably necessary to perform the requested AI-assisted operation should be transmitted to an AI provider.
Changes
HardLabs may add or replace providers as its infrastructure evolves.
Material Subprocessor changes will be handled in accordance with applicable customer agreements and the HardLabs DPA.
Questions or objections relating to subprocessors may be sent to: